- Resolves: RHEL-77983 - Defects found by OpenScanHub - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9] - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9] - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9] - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9] - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9] - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9] - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9] - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9] - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9 - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-77983 - Defects found by OpenScanHub - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9] - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9] - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9] - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9] - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9] - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9] - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9] - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9] - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9 - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Resolves: RHEL-77983 - Defects found by OpenScanHub - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9] - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9] - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9] - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9] - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9] - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9] - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9] - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9] - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9 - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix FTBFS. - 2.4.0 with patch for cmake shared libs. - 2.4.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use make macros - reduce unnecessary dependencies - disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)" https://github.com/bminor/glibc/blob/master/NEWS causing build failure - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial package version - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream version - New upstream version - New upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Don't pass gcc-only compiler flags to other compilers, e.g. clang (based on https://src.fedoraproject.org/rpms/Judy/pull-request/3 from Timm Baeder) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove timestamp to make the man pages non-conflicting Resolves: #1915251 - Fix CVE-2026-21413 and CVE-2026-24450 Resolves: RHEL-165374, RHEL-165461 - Fix CVE-2026-51235 Resolves: RHEL-219221 - Fix CVE-2026-21413 and CVE-2026-24450 Resolves: RHEL-165373, RHEL-165456 - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix CVE-2026-10805 (RHEL-191624) - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix CVE-2026-10805 (RHEL-191624) - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix CVE-2026-10805 (RHEL-191624) - Update to 1.2.24 release - Fix improper escaping of Libreswan configuration (CVE-2024-9050) - Update to 1.2.26 release - Add support for leftsubnets/rightsubnets (RHEL-56553) - Add support for nm-auto-defaults (RHEL-85768) - Fix regression on phase2alg/esp for IKEv1 (RHEL-85768) - Update to later upstream release to address regressions (RHEL-56551) - Support rightca in ipsec section (RHEL-118819) - Symetric import/export with nm-auto-default (RHEL-122306) - Esp param properly exported (RHEL-122626) - Correct leftid export when it contains @ - Fix small nm-auto-defaults issue - Fix potentional crash in malformed items import - Upgrade to 1.2.29 - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789) - Support leftprotoport and rightprotoport options. (RHEL-130907) - Fix error on duplicate key 'phase2alg'. (RHEL-131233) - Fix import connection with RSA key. (RHEL-127863) - Upgrade to 1.2.30 - Declare supports-safe-private-file-access (RHEL-140610) - Update to 1.2.24 release - Fix improper escaping of Libreswan configuration (CVE-2024-9050) - Update to 1.2.26 release - Add support for leftsubnets/rightsubnets (RHEL-56553) - Add support for nm-auto-defaults (RHEL-85768) - Fix regression on phase2alg/esp for IKEv1 (RHEL-85768) - Update to later upstream release to address regressions (RHEL-56551) - Support rightca in ipsec section (RHEL-118819) - Symetric import/export with nm-auto-default (RHEL-122306) - Esp param properly exported (RHEL-122626) - Correct leftid export when it contains @ - Fix small nm-auto-defaults issue - Fix potentional crash in malformed items import - Upgrade to 1.2.29 - Support creating both ends of IPsec (Libreswan) tunnels. (RHEL-85789) - Support leftprotoport and rightprotoport options. (RHEL-130907) - Fix error on duplicate key 'phase2alg'. (RHEL-131233) - Fix import connection with RSA key. (RHEL-127863) - Upgrade to 1.2.30 - Declare supports-safe-private-file-access (RHEL-140610) - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix CVE-2026-10805 (RHEL-191624) - Update to 1.53.3 (dev) - Add more IPv6 prefix delegation options (RHEL-85765) - Fix order of parsing port/controller properties in nmcli (RHEL-85767) - Improve interface activation logic (RHEL-85766) - Fix WireGuard IPv6 firewall rules (RHEL-85763) - Support OVS-DPDK dpdk-lsc-interrupt and mtu_request configurations (RHEL-77148) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Update to 1.53.4 (dev) - initrd: add new NBFT parser (RHEL-83061) - Add support for configuring per-device IPv4 sysctl forwarding option in NetworkManager (RHEL-59083) - Support reapply on OVS settings (RHEL-86877) - Add support for configuring the loopback interface in nmtui (RHEL-85770) - Replace ioctl wth netlink for ethtool in NetworkManager (RHEL-85764) - NetworkManager does not add the `lock` attribute when `rto_min` is used (RHEL-85778) - Can not change `bridge.options.mcast-snooping-enable` on partial managemd OVS bridge (RHEL-87168) Resolves: RHEL-83061 Resolves: RHEL-59083 Resolves: RHEL-87596 Resolves: RHEL-85770 Resolves: RHEL-85764 Resolves: RHEL-85778 Resolves: RHEL-87168 - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Update to 1.54.0 (rc1) - Devices not becoming managed sometimes (RHEL-93108) - Crash on _l3cfg_notify_cb (RHEL-92314) - Fix autoconnect-ports for unrealized VLANs and other virtual devices (NMT-1610) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Update to 1.54.0 (rc2) - Support deactivating a connection without resetting SRIOV sriov_numvfs (RHEL-98728) - Fix a race condition in ovs tun interface (RHEL-98551) - Update to 1.54.0 (rc3) - Fix ipv6 static route deleted with dualstack (RHEL-102772) - Allow setting IP method to disabled in port connection (RHEL-102768) - Update to 1.54.0 - Fix reaply on bridge port VLAN (RHEL-102743) - Accept hostnames longer than 64 characters from DNS lookup (RHEL-106787) - Update to 1.54.1 - Adding a VF configuration resets and re-configures all other VFs (RHEL-113954) - Fix connection.autoconnect-ports of OVS ports (RHEL-114200) - Global DNS config without domains silently ignored from D-Bus (RHEL-115973) - Update to 1.54.2 - Support setting protocol version of HSR/PRP (RHEL-122172) - Support interlink for HSR/PRP (RHEL-122175) - Improve logging of networking off (RHEL-122173 ) - Don't delete unrelated OVS ports (RHEL-121104) - Update to 1.54.3 - Fix CVE-2025-9615 (RHEL-111783) - Add hard dependency on iputils (RHEL-134751) - Fix 802.1x auth for bridge interface (RHEL-151941) - Fix arp_missed_max error on 802.3ad bond reapply (RHEL-182629) - Fix CVE-2026-10805 (RHEL-191624) - Update to 2.0.36 - Update to 2.0.36 - Update to 2.0.36 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Backport fix for CVE-2026-41651. - Resolves: #RHEL-170504 - Update to 2.0.16 - Disable libdecor until it is added to centos/RHEL9 - Build with SDL_STATIC_PIC instead of SDL_STATIC - Build with SDL_STATIC_PIC and SDL_STATIC to actually make the static version of SDL2 - Re-enable libdecor support now that it's available in RHEL 9 Resolves: rhbz#2003471 - Update to 2.0.18 Resolves: rhbz#2028076 - Fix multilib conflict with SDL_revision.h (rhbz#2008838) - Backport fix for building against wayland-1.20+ - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359) - Move libSDL2main to -devel and refresh split CMake target patch Resolves: rhbz#2038390 - Update to 2.0.20 Resolves: rhbz#2039137 - Drop backported patches included in this release - Backport Wayland fixes with Wayland-by-default from upstream Resolves: rhbz#2051963 - Update to 2.26.0 Resolves: rhbz#2051959 - Drop backported patches included in this release - Update to 2.0.16 - Disable libdecor until it is added to centos/RHEL9 - Build with SDL_STATIC_PIC instead of SDL_STATIC - Build with SDL_STATIC_PIC and SDL_STATIC to actually make the static version of SDL2 - Re-enable libdecor support now that it's available in RHEL 9 Resolves: rhbz#2003471 - Update to 2.0.18 Resolves: rhbz#2028076 - Fix multilib conflict with SDL_revision.h (rhbz#2008838) - Backport fix for building against wayland-1.20+ - Add patch to split SDL2 CMake targets for static libraries (rhbz#1965359) - Move libSDL2main to -devel and refresh split CMake target patch Resolves: rhbz#2038390 - Update to 2.0.20 Resolves: rhbz#2039137 - Drop backported patches included in this release - Backport Wayland fixes with Wayland-by-default from upstream Resolves: rhbz#2051963 - Update to 2.26.0 Resolves: rhbz#2051959 - Drop backported patches included in this release - Update to 1.6.3 - Add source tarbal PGP signature verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1 - Related: RHEL-60277 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0 - Related: RHEL-60277 - rebuilt to try TMT tests in osci - Resolves: RHEL-80816 - fix dep issues in tests subpackage - Resolves: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0 - Related: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0 - Related: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0 - Resolves: RHEL-85839 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1 - Related: RHEL-60277 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0 - Related: RHEL-60277 - rebuilt to try TMT tests in osci - Resolves: RHEL-80816 - fix dep issues in tests subpackage - Resolves: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0 - Related: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0 - Related: RHEL-80816 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0 - Resolves: RHEL-85839 - update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1 - Resolves: RHEL-170152 - Update to 0.201 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add the substitution rule for system-ui in fontconfig config. - Update to 0.301 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + accountsservice-0.6.55-5 - Own /usr/share/accountsservice - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bring in RHEL-8 patches Resolves: #2014692 - Synchronize permissions and group ownership for icon and users dirs between rpm file manifest and daemon expectations. Resolves: #2057576 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + accountsservice-0.6.55-5 - Own /usr/share/accountsservice - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bring in RHEL-8 patches Resolves: #2014692 - Synchronize permissions and group ownership for icon and users dirs between rpm file manifest and daemon expectations. Resolves: #2057576 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - remove mention of Fedora from desc - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - remove mention of Fedora from desc - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - remove mention of Fedora from desc - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.92 - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + adwaita-icon-theme-40.0~rc-1 - Update to 40.rc - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update upstream URLs - Update to 40.1.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt to ship adwaita-icon-theme-devel in CRB - Resolves: #2021357 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make adwaita-gtk2-theme recommends conditional on gtk2 being installed - Split highcontrast-icon-theme out to a new subpackage - Explicitly require cursor and icon themes required for the gtk2 themes - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.92 - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + adwaita-icon-theme-40.0~rc-1 - Update to 40.rc - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update upstream URLs - Update to 40.1.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt to ship adwaita-icon-theme-devel in CRB - Resolves: #2021357 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1.4.0 Resolves: bz#1968275 - 1.4.1 Resolves: bz#2023181 - Rebuild (Qt 5.15.3) Resolves: bz#2061416 - Bump build to build against correct Qt version Resolves: bz#2061416 - 1.4.2 Resolves: bz#2175754 - New release - Update legacy-providers patch to work with new release source - Add gcp-hostname.patch - New release - New release - new version - new version - new version - New release - Update legacy-providers patch to work with new release source - Add gcp-hostname.patch - New release - New release - new version - new version - new version RHEL 9.5.0 ERRATUM - aide fails with "Not enough parameters in db:15384. Trying to continue." unexpectedly Resolves: RHEL-27606 - AIDE fails when using root_prefix option Resolves: RHEL-28882 RHEL 9.6.0 ERRATUM - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation Resolves: RHEL-4331 RHEL 9.7 ERRATUM - CVE-2025-54389 aide: improper output neutralization enables bypassing Resolves: RHEL-109912 RHEL 9.8.0 ERRATUM - rebase to 0.19.2 Resolves: RHEL-110573 - Switch to libnettle for hashing - prevent aide from crashing if database is a HTTPS URL Resolves: RHEL-76014 - prevent aide from exiting if a file is truncated during check Resolves: RHEL-1569 RHEL 9.8.0 ERRATUM - Modernize config file Resolves: RHEL-83776 - Do not monitor link count in /var/log/journal Resolves: RHEL-83776 - /boot/grub2/grubenv is excluded from check due to boot_success implementation Resolves: RHEL-83776 - Adjust default config to avoid false positives in /etc Resolves: RHEL-83776 RHEL 9.6.0 ERRATUM - /boot/grub2/grubenv's timestamp is getting modified continuously due to "boot_success" implementation Resolves: RHEL-4331 RHEL 9.7 ERRATUM - CVE-2025-54389 aide: improper output neutralization enables bypassing Resolves: RHEL-109912 RHEL 9.8.0 ERRATUM - rebase to 0.19.2 Resolves: RHEL-110573 - Switch to libnettle for hashing - prevent aide from crashing if database is a HTTPS URL Resolves: RHEL-76014 - prevent aide from exiting if a file is truncated during check Resolves: RHEL-1569 RHEL 9.8.0 ERRATUM - Modernize config file Resolves: RHEL-83776 - Do not monitor link count in /var/log/journal Resolves: RHEL-83776 - /boot/grub2/grubenv is excluded from check due to boot_success implementation Resolves: RHEL-83776 - Adjust default config to avoid false positives in /etc Resolves: RHEL-83776 - Re-add syslog_format config option dropped during rebase to 0.19.2 Resolves: RHEL-178539 - Add aide-migrate-config to automate config migration from pre-0.19 syntax - Update webserver testpage - Drop splashtolss.sh build requirements - Add pixmaps/fedora-logo.ico - Add ipa modern-ui artwork - Revise AlmaLinux description not to hostile towards CentOS - Added updated index.html to sources. - Updated prep and install sections. - Update index.html to fix link on the logo. - Update webserver testpage - Drop splashtolss.sh build requirements - Add pixmaps/fedora-logo.ico - Add ipa modern-ui artwork - Update webserver testpage - Drop splashtolss.sh build requirements - Add pixmaps/fedora-logo.ico - Add ipa modern-ui artwork - Update webserver testpage - Drop splashtolss.sh build requirements - Add pixmaps/fedora-logo.ico - Add ipa modern-ui artwork - Updated Intel SOF firmware files to 1.4.1 - Intel SOF firmware files to 1.4.1 fixes (symlinks) - Updated Intel SOF firmware files to 1.4.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Removed Intel SOF firmware files (moved to alsa-sof-firmware package) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.2.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12 - update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13 - update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14 - update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3 - update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12 - update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13 - update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14 - update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.2.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.2.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.2.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.2.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.2.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.2.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.2.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.2.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - -pulseaudio: Requires: pulseaudio-daemon - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.2.7.1 - Update to v2024.03 - Add AVS topology files v2024.02 - Update to v2024.09 - Update to v2024.09.1 - Update to v2024.09.2 - Add sof-ipc4-lib directory - Update to v2025.05 - Update to v2025.12.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Updated to 1.2.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12 - update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13 - update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14 - update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3 * Updated to 1.2.12 * Updated to 1.2.13 * Updated to 1.2.14 * Updated to 1.2.15.2 - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - AlmaLinux changes - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - AlmaLinux changes - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - AlmaLinux changes - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - AlmaLinux changes - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - AlmaLinux changes - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - AlmaLinux changes - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - AlmaLinux changes - initial help content for RHEL 9.0 Resolves: rhbz#1995939 - update help content for RHEL 9.2 Resolves: rhbz#2071652 - AlmaLinux debrand - Fix vconsole layout doesn't work for ostree (jkonecny) Resolves: RHEL-101057 - test: make dnf substitutions test check only relevant values (rvykydal) - test: add new substitution members in dnf tests (rvykydal) - pyanaconda: payload: return exception details for payload failures (k.koukiou) - ui: tui: installation_source: show error message in the TUI screen (k.koukiou) Resolves: RHEL-4705 - storage: fix mount point assignment of non-formatted swap partitions (rvykydal) Related: RHEL-16355 - storage: include only fstab devices in fsset swap devices property (rvykydal) Resolves: RHEL-16355 - Fix: UnboundLocalError: local variable 'e' referenced before assignment (k.koukiou) Related to: RHEL-4705 - Emit authselect in KS when fingerprint is enabled (adamkankovsky) Resolves: RHEL-85175 - Set Authselect agruments after run in Security module (adamkankovsky) Resolves: RHEL-85175 - Authselect code simplification (adamkankovsky) Resolves: RHEL-85175 - custom: Reallocate partitions when removing a partition (vtrefny) Resolves: RHEL-114169 - Fixing authselect logical differences not resolved during backporting (adamkankovsky) Resolves: RHEL-85175 - bootloader: efi: utilize grub2-common script for handling config file generation (k.koukiou) Resolves: RHEL-36187 - Fix permissions of the ssh config created by Anaconda (ppolawsk) Resolves: RHEL-129787 - pyanaconda: rpm_ostree: fix _handle_boot_if_not_mount_point method issues (k.koukiou) Related: RHEL-74145 - ostree needs to have /boot be bindmounted into sysroot. (a.badger) Resolves: RHEL-74145 - Only show compatible translations in text mode (mkolman) Resolves: RHEL-144834 - Fix user input in driver disk menu is not displayed (adamkankovsky) Resolves: RHEL-4737 - AlmaLinux changes - Annocheck: Fix the --debug-dir option. - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76809) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-76040) - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77489) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Generate latest-annobin.tar.xz at prep phase (RHEL-82899) - Rebuild against LLVM v20. (RHEL-82001) - Rebase to 12.93. - Annocheck: Fix test for GO revision. (RHEL-56031) - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Rebase to 12.98. (RHEL-105574) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - NVR bump to allow rebuilding against LLVM v21. (RHEL-144392) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76809) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-76040) - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77489) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Generate latest-annobin.tar.xz at prep phase (RHEL-82899) - Rebuild against LLVM v20. (RHEL-82001) - Rebase to 12.93. - Annocheck: Fix test for GO revision. (RHEL-56031) - Annocheck: Fix bugs in debug rpm location code. Add more glibc exceptions. (RHEL-95216) - Annocheck: Improve performance with multiple debug info files and multiple files to scan. (#2366180) - Annocheck: Update heuristic for detecting gcc files to cope with gcc 15. (#2365824) - Rebase to 12.98. (RHEL-105574) - Improve configure and meson files for consistent builds. - Annocheck: Delete the temporary debug info directory after the tests have finished. - NVR bump to allow rebuilding against LLVM v21. (RHEL-144392) - Add support for running SQL Server as a SELinux unconfined application with SELinux in enforcing mode on RHEL 9 Resolves: RHEL-16342 - ExcludeArch: i686 - Revert ExcludeArch: i686 due to TFT-2460 Resolves: RHEL-16342 - Fail on RHEL or CentOS 10 because it's not supported Resolves: RHEL-67804 - Use new adutil functionality to enable AES encryption Resolves: RHEL-67807 - Add mssql_tools_versions, mssql_tls_self_sign to allow installing different versions of mssql-tools Resolves: RHEL-68374 - Deprecate mssql_accept_microsoft_odbc_driver_17_for_sql_server_eula Resolves: RHEL-69311 - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database Resolves: RHEL-92712 - Add secondary_role_allow_connections and mssql_ha_read_only_routing_list Resolves: RHEL-92718 - Add mssql_ha_ag_is_contained and mssql_ha_ag_reuse_system_db to allow creating AG as contained and reuse system database Resolves: RHEL-92712 - refactor: support ansible 2.19 Resolves: RHEL-106149 - test: use post quantum crypto for certs where available (#368) - fix: Fix templates/configure_ag.j2 for Ansible 2.19 Resolves: RHEL-106149 - provide ad_integration_sssd_settings to set proper krb5_canonicalize Resolves: RHEL-135863 - Initialize the package - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9 - Replace upstream value of leapp_system_roles_collection with downstream redhat.rhel_system_roles. - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9 - Update to latest upstream version via commit hash - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9 - Fix spec file to require rhel-system-roles package - Resolves: RHEL-117252 : [RFE] Add ansible-collection-redhat-leapp to RHEL9 - Update to latest upstream version 1.7.4 - Resolves: RHEL-153381 : Fix the role failing on steps that copy logs to the controller EL9 - Initial version - Create collection artifact subpackage, disabled by default Taken from rhel-system-roles. - Add redfish_* modules from community.general - ansible-core 2.14.17 release (RHEL-38539) - ansible-core 2.14.18 release (RHEL-69086) - Fix license file path - Add telemetry for RHEL (RHEL-123003) - Fix selinux AVC denial when telemetry is enabled (RHEL-148293) - ansible-core 2.14.18 release (RHEL-69086) - Fix license file path - Add telemetry for RHEL (RHEL-123003) - Fix selinux AVC denial when telemetry is enabled (RHEL-148293) - Fix CVE-2026-11332 (prevent arbitrary git configuration via role requirements) (RHEL-194134) - Update to version 1.14.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0 Resolves: RHEL-67566 - Multi sudorule management with the ipasudorule module Resolves: RHEL-61431 - Update to version 1.14.1 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1 Resolves: RHEL-67566 - Fix requirements for ansible-core Resolves: RHEL-69146 - Update to version 1.14.2 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2 Resolves: RHEL-67566 - ipareplica: Pass ipareplica_ip_addresses to ipaclient Resolves: RHEL-40227 - ipagroup: Correctly handle externalmember in member actions Resolves: RHEL-25009 - ipasudorule: Evaluate all members related to hosts and users Resolves: RHEL-68439 - ipacert: Correctly handle removFromCRL revocation Resolves: RHEL-70016 - Collection: No more role module duplication Resolves: RHEL-71123 - Update to version 1.14.3 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.4 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.5 Resolves: RHEL-67566 - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343) Resolves: RHEL-78230 - Update to version 1.14.6 - Fix CA certificates iteration in ipaclient role Resolves: RHEL-88206 - Update to version 1.15.0 Resolves: RHEL-104652 - ipaclient: Fix AttributeError by defaulting dns_over_tls to False Resolves: RHEL-92844 - Provide compatibility for AAH naming Resolves: RHEL-94769 - Ensure ipaidrange required parameters are correct on recent versions of IPA Resolves: RHEL-79820 - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles Resolves: RHEL-78636 - Update to version 1.15.1 Resolves: RHEL-104652 - ipaclient: client_dns has new statestore arg with IPA change e6445b8 Resolves: RHEL-106558 - Update to version 1.16.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0 Resolves: RHEL-139144 - Add suppport for passkey management Resolves: RHEL-139257 - Add suppport for sysaccount management Resolves: RHEL-140601 - ipadnsrecord: Allow to set any IP address if create_reverse is false Resolves: RHEL-140607 - Update to version 1.14.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0 Resolves: RHEL-67566 - Multi sudorule management with the ipasudorule module Resolves: RHEL-61431 - Update to version 1.14.1 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1 Resolves: RHEL-67566 - Fix requirements for ansible-core Resolves: RHEL-69146 - Update to version 1.14.2 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2 Resolves: RHEL-67566 - ipareplica: Pass ipareplica_ip_addresses to ipaclient Resolves: RHEL-40227 - ipagroup: Correctly handle externalmember in member actions Resolves: RHEL-25009 - ipasudorule: Evaluate all members related to hosts and users Resolves: RHEL-68439 - ipacert: Correctly handle removFromCRL revocation Resolves: RHEL-70016 - Collection: No more role module duplication Resolves: RHEL-71123 - Update to version 1.14.3 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.4 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.5 Resolves: RHEL-67566 - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343) Resolves: RHEL-78230 - Update to version 1.14.6 - Fix CA certificates iteration in ipaclient role Resolves: RHEL-88206 - Update to version 1.15.0 Resolves: RHEL-104652 - ipaclient: Fix AttributeError by defaulting dns_over_tls to False Resolves: RHEL-92844 - Provide compatibility for AAH naming Resolves: RHEL-94769 - Ensure ipaidrange required parameters are correct on recent versions of IPA Resolves: RHEL-79820 - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles Resolves: RHEL-78636 - Update to version 1.15.1 Resolves: RHEL-104652 - ipaclient: client_dns has new statestore arg with IPA change e6445b8 Resolves: RHEL-106558 - Update to version 1.16.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0 Resolves: RHEL-139144 - Add suppport for passkey management Resolves: RHEL-139257 - Add suppport for sysaccount management Resolves: RHEL-140601 - ipadnsrecord: Allow to set any IP address if create_reverse is false Resolves: RHEL-140607 - Update to version 1.14.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.0 Resolves: RHEL-67566 - Multi sudorule management with the ipasudorule module Resolves: RHEL-61431 - Update to version 1.14.1 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.1 Resolves: RHEL-67566 - Fix requirements for ansible-core Resolves: RHEL-69146 - Update to version 1.14.2 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.14.2 Resolves: RHEL-67566 - ipareplica: Pass ipareplica_ip_addresses to ipaclient Resolves: RHEL-40227 - ipagroup: Correctly handle externalmember in member actions Resolves: RHEL-25009 - ipasudorule: Evaluate all members related to hosts and users Resolves: RHEL-68439 - ipacert: Correctly handle removFromCRL revocation Resolves: RHEL-70016 - Collection: No more role module duplication Resolves: RHEL-71123 - Update to version 1.14.3 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.4 Resolves: RHEL-67566 - Fix management of AD objects for ipagroup Resolves: RHEL-25009 - Update to version 1.14.5 Resolves: RHEL-67566 - ipa* deployment roles: Hotfix for dns_over_tls (Freeipa#7343) Resolves: RHEL-78230 - Update to version 1.14.6 - Fix CA certificates iteration in ipaclient role Resolves: RHEL-88206 - Update to version 1.15.0 Resolves: RHEL-104652 - ipaclient: Fix AttributeError by defaulting dns_over_tls to False Resolves: RHEL-92844 - Provide compatibility for AAH naming Resolves: RHEL-94769 - Ensure ipaidrange required parameters are correct on recent versions of IPA Resolves: RHEL-79820 - Add support for DNS-over-TLS for ipaclient, ipareplica and ipaserver roles Resolves: RHEL-78636 - Update to version 1.15.1 Resolves: RHEL-104652 - ipaclient: client_dns has new statestore arg with IPA change e6445b8 Resolves: RHEL-106558 - Update to version 1.16.0 https://github.com/freeipa/ansible-freeipa/releases/tag/v1.16.0 Resolves: RHEL-139144 - Add suppport for passkey management Resolves: RHEL-139257 - Add suppport for sysaccount management Resolves: RHEL-140601 - ipadnsrecord: Allow to set any IP address if create_reverse is false Resolves: RHEL-140607 - RHEL8.6+, RHEL9+, Fedora - add "ansible-core or ansible" dep - Switch to using bcond spec file mechanisms - Latest upstream release (BZ 2059464) - Latest upstream release (BZ 2132847) - Latest upstream release (RHEL-17430) - ansible-core 2.14.17 release (RHEL-38539) - ansible-core 2.14.18 release (RHEL-69086) - Fix license file path - Add telemetry for RHEL (RHEL-123003) - Fix selinux AVC denial when telemetry is enabled (RHEL-148293) - ansible-core 2.14.18 release (RHEL-69086) - Fix license file path - Add telemetry for RHEL (RHEL-123003) - Fix selinux AVC denial when telemetry is enabled (RHEL-148293) - Fix CVE-2026-11332 (prevent arbitrary git configuration via role requirements) (RHEL-194134) - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Fix test failures due to JPEG CMYK support in OpenJDK - Resolves: RHEL-5354 - Add OpenJDK bindings - Resolves: RHEL-62405 - Add OpenJDK bindings in a separate configuration file - Resolves: RHEL-62405 - Fix the usage ot patch macro - Disable building on i686 - Add noarch to ExclusiveArch - Fix test declarations - Implement new Java bindings and fix ant-manual license - Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Bump 1.0.0.20201109 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Enable CI. Related: rhbz#1956212 - Delete unnecessary xemacs in tests/tests.yml. Related: rhbz#1956212 - Fix covscan report. Related: rhbz#1963073 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to add anthy-unicode-devel to CRB. Related: rhbz#2068287 - Fix covscan report. Related: rhbz#2068287 - Rebuild with regenerated Requires on Java - Fix patch usage - Rebuild - Rebuild - set javac source / target version to 1.8 to fix issues with Java 11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Update to upstream version 1.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Update to upstream version 1.8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 1.9.0 - Resolves: rhbz#2305042 - Use %autosetup -C - Update javapackages test plan to f42 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Update to upstream version 1.16.1 - Update to upstream version 1.17.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Use %autosetup -C - Update javapackages test plan to f42 - Rebuilt for java-17-openjdk as system jdk - Update to upstream version 2.11.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Update to upstream version 2.16.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Use %autosetup -C - Update javapackages test plan to f42 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Workaround build issue with RPM 4.18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - update to 5.1.18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.20 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.20 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - 0.14.1 - 0.14.2 - 0.14.3 - Build appstream-compose library for appstream-generator >= 0.8.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 0.14.5 Resolves: rhbz#1998881 - Rebase to 0.15.5 Resolves: rhbz#2134785 - Create symlinks manually to make it build (the symlinks were not created because of reverting the patch to upgrade to Meson 0.62) - Rebase to 0.16.1 Resolves: rhbz#2169103 - Drop unneeded downstream hacks to build with older Meson - New metadata version - Resolves: rhbz#2062807 - New metadata version - Resolves: rhbz#2062807 - New metadata version - Do not ship fedora-specific files - Resolves: #RHEL-4522 - Resolves: #RHEL-19012 - fix integer bounds checking in apr_encode_* Resolves: RHEL-17123 - fix integer bounds checking in apr_encode_* Resolves: RHEL-17123 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2196576 - CVE-2022-25147 apr-util: out-of-bounds writes in the apr_base64 - Resolves: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Related: #2168760 - mod_auth_openidc fails with IPv6 OIDCMemCacheServers - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Remove patches - Remove Vim support - Update to latest upstream release 9.0.2 - Detection of latest Python releases (#1889725) - Update to latest upstream release 9.0.4 - Add patch to fix problem with not respecting newline configuration. - Remove unused patches. - remove ImageMagic requirement - remove asciidoc-music sub-package (lilypond requirement) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update source url - new upstream release 9.1.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Do not install CONTRIBUTING.md in javadoc package - Update to 2.34.0 - Update to 2.34.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.34.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.37.90 - Update to 2.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.34.0 - Update to 2.34.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.34.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.37.90 - Update to 2.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.39.90 - Drop unused ldconfig_scriptlets macro call - Update to 2.39.90.1 - Update to 2.39.91 - Update to 2.40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Install a scriptlet to fix AT_SPI_BUS for Xwayland apps run as root (#1821345) - Update to 2.40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.40.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.39.90 - Drop unused ldconfig_scriptlets macro call - Update to 2.39.90.1 - Update to 2.39.91 - Update to 2.40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Install a scriptlet to fix AT_SPI_BUS for Xwayland apps run as root (#1821345) - Update to 2.40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.40.3 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Bump release for June 2024 mass rebuild - Bump release for Aug 2024 java mass rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Sync with Fedora - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Update to 2.34.0 - Update to 2.34.1 - Update to 2.35.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.34.0 - Update to 2.34.1 - Update to 2.35.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.28.1 - Switch to meson build system - Update source URLs - Tighten -devel subpackage deps - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.28.2 Resolves: #1965879 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix compatibility with gcc 10 - Sync compiler/linker flags with RHEL - Drop IBM z10 and z196 subpackages - s390 is now optimized for z12 Related: #1780286 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Sync with rhel 8.3 + cleanup - Add new subpackages - z{14,15} - Unlike in rhel8, the base subpackage still needs to be build for z12. - Covscan related bugfixes - Spec and git cleanup (remove unused patches/sources) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix the messed scriptlets Resolves: #1929845 - Remove unused scriptlets - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix compatibility with gcc 10 - Sync compiler/linker flags with RHEL - Drop IBM z10 and z196 subpackages - s390 is now optimized for z12 Related: #1780286 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Sync with rhel 8.3 + cleanup - Add new subpackages - z{14,15} - Unlike in rhel8, the base subpackage still needs to be build for z12. - Covscan related bugfixes - Spec and git cleanup (remove unused patches/sources) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix the messed scriptlets Resolves: #1929845 - Remove unused scriptlets - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix compatibility with gcc 10 - Sync compiler/linker flags with RHEL - Drop IBM z10 and z196 subpackages - s390 is now optimized for z12 Related: #1780286 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Sync with rhel 8.3 + cleanup - Add new subpackages - z{14,15} - Unlike in rhel8, the base subpackage still needs to be build for z12. - Covscan related bugfixes - Spec and git cleanup (remove unused patches/sources) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix the messed scriptlets Resolves: #1929845 - Remove unused scriptlets - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream maintenance release, 3.1.4 - Prevent scriplets from failing - When upgrading, restart the daemon if it's running - If uninstalling, stop the daemon - auditctl: use pidfd_send_signal for signaling auditd Resolves: RHEL-45865 - Minor doc update Resolves: RHEL-5186 - augenrules: do not exit with failure if in immutable mode Resolves: RHEL-40110 - auditd.service: Disable ProtectControlGroups Resolves: RHEL-5197 - auditctl: correct output when displaying rules with exe/path/dir Resolves: RHEL-40243 - Disable ProtectKernelModules=true in service file Resolves: RHEL-59570 - af_unix plugin: restore original behavior in binary mode Resolves: RHEL-59585 - Support image mode Resolves: RHEL-69033 - Resolve ordering cycle when using remote logging Resolves: RHEL-11252 - Filter syscalls to ensure architecture-specific availability Resolves: RHEL-70455 - Don't do "live" operations during rpm-ostree composes Resolves: RHEL-69033 - auditctl: correct buffer in filter_supported_syscalls to avoid overflow Resolves: RHEL-59585 - ausearch: correct search for DAEMON related events - allow hex digits when interpreting tty data Resolves: RHEL-82279 - Fix TTY hostname in log messages Resolves: RHEL-78323 - Update end of event detection mechanism Resolves: RHEL-78323 - ausearch-checkpoint race condition fix Resolves: RHEL-86897 - Fix POSTIN scriplet to not fail during upgrade Resolves: RHEL-138696 - Rebase to Fedora Rawhide - Remove patches which are upstream - resolves: RHEL-56802 - Fix parsing of multipath.conf resolves: RHEL-93649 - Rebase to Fedora Rawhide - Remove patches which are upstream - resolves: RHEL-56802 - Fix parsing of multipath.conf resolves: RHEL-93649 - Fix Japanese translations (RHBZ #2153364) - Update translations (RHBZ #2189498) - Do not prompt for password twice when changing password of local user (RHBZ #2228098) - Support group merging in nsswitch.conf (RHEL-15779) - Fix issues with Fortran detection and oneAPI HPC Toolkit (RHEL-40739) - Fix test suite under Perl 5.26 (RHEL-47138) - rebuilt - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Cherry-pick: Fix typo in variable name (#2132715) - Backport: Fix testsuite failures with bash 5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX licences (#2222088) - Modify spec file to support autoconf-latest package - Renamed main package as autoconf-latest - Adapt dependencies to c9s - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Cherry-pick: Fix typo in variable name (#2132715) - Backport: Fix testsuite failures with bash 5.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Migrate to SPDX licences (#2222088) - Modify spec file to support autoconf-latest package - Renamed main package as autoconf-latest - Adapt dependencies to c9s - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport: tests: use testsuite/ directory in DejaGnu tests - Fixes: RHBZ#2215991 - Backport python: add 3.10 - 3.15 to the version search list - Fixes: RHBZ#2210304 - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - fix file attributes on /run/avahi-daemon (RHEL-5633) - avahi-client: fix resource leak (RHEL-27722) - fix resource leak in avahi_time_event_queue_new (RHEL-27717) - Fix CVE-2024-52616 (RHEL-67722) - Fix CVE-2024-52615 (RHEL-94846) - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 2.9.0 - Disable Python 2 build on RHEL 9+ - Disable Python 2 build entirely - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Drop build dependency on python-freezegun - Resolves: rhbz#1947517 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.9.1. - Fixes CVE-2021-20095 Resolves: rhbz#1955615 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - rebase to the latest upstream (RHEL-88142) - rebase to the latest upstream (RHEL-88142) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - fix bacula compatibility with Image Mode (RHEL-6862) - Disable column reordering of FolderDisplay (RHEL-84271) - Rebuild with LLVM 18 (RHEL-28684) - Fic bio* tools (RHEL-61615) - Explicitely disable blazesym support (RHEL-49640) - Fix gating tests of libbpf gating. - Rebase to the latest version (RHEL-63883) - Rebuild with libbpf 1.5.0 - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Rebuild with LLVM 21 (RHEL-108343) - Rebuild with LLVM 18 (RHEL-28684) - Fic bio* tools (RHEL-61615) - Explicitely disable blazesym support (RHEL-49640) - Fix gating tests of libbpf gating. - Rebase to the latest version (RHEL-63883) - Rebuild with libbpf 1.5.0 - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Rebuild with LLVM 21 (RHEL-108343) - Fix arbitrary bytecode produced via out-of-bounds writing - Resolves: CVE-2022-42920 - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Rebuild required for BIND changes for KeyTrap change (CVE-2023-50387) - Rebuilt for BIND CVE-2024-1737 fixes (CVE-2024-1737) - Bump version above RHEL 9.5 - Release 11.11, Support BIND 9.18 Resolves: RHEL-78927 - Release bump, fixed date for previous changelog entry Resolves: RHEL-78927 - Drop obsoletes for bind, switch back to bind 32:9.16.23-19 requirement Resolves: RHEL-80345 - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - logrotate: skip if empty and remove old variants (RHEL-113942) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - logrotate: skip if empty and remove old variants (RHEL-113942) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - logrotate: skip if empty and remove old variants (RHEL-113942) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Initial commit on c9s Resolves: RHEL-83144 - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - logrotate: skip if empty and remove old variants (RHEL-113942) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Prevent name.c:670 attributes assertion failed (RHEL-30407) - Add extra checks for relative names - logrotate: skip if empty and remove old variants (RHEL-113942) - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Refuse malformed DNSKEY records (CVE-2025-8677) - Address various spoofing attacks (CVE-2025-40778) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix upstream reported regression in recent CVE fix (CVE-2025-8677) - Add upstream created test to this regression - Copy named.* files from /usr/share/named into var/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add missing bind-chroot subdirectories - Add sysusers named user creation (RHEL-132053) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-132053) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Correct changelog version of previous change - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Correct backport issue in the patch (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Fix assertion crash via unsigned NSEC/NSEC3 (CVE-2026-13204, RHEL-213495) - Fix RPZ wildcard expansion self-referential CNAME (CVE-2026-11331, RHEL-213495) - Reject invalid signed wildcard records (CVE-2026-11721, RHEL-213417) - Fix cache exhaustion via dns_slabheaders (CVE-2026-11622, RHEL-213389) - Reject out-of-zone NSEC next owner names (CVE-2026-13321, RHEL-213314) - Fix NSEC3 signer validation (CVE-2026-10723, RHEL-215704) - Retire: binutils-rhivos-segment-gap.patch. (RHEL-60807) - Fix seg-fault in AArch64 linker when building u-boot. (RHEL-78350) - Adds z17 as a cpu name for the s390x architecture. (RHEL-87216) - NVR bump to allow rebuilding for RHEL-9.7 (RHEL-87216) - Add missing tests of AArch64 instructions to the assembler testsuite. (RHEL-104630) - Adds tests for the linker's --error-execstack and --error-rwx-segments command line options. (RHEL-109970) - Add missing space to ppc476-shared2 linker test. (RHEL-113842) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-126883) - Fix a potential illegal memory access when copying a corrupt input file. (RHEL-132287) - Fix a potential illegal memory access when copying a corrupt input file. (RHEL-142281) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to bison 3.7.1 (#1859887) - Update to bison 3.7.2 (#1876120) - Update to bison 3.7.3 (#1887766) - Update to bison 3.7.4 (#1897780) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild with updated binutils (#1960667) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to bison 3.7.1 (#1859887) - Update to bison 3.7.2 (#1876120) - Update to bison 3.7.3 (#1887766) - Update to bison 3.7.4 (#1897780) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild with updated binutils (#1960667) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Provide OpenType Bitmap fonts - Use bitmapfonts2otb.py to combine bitmap fonts - Add bitmap-*-opentype-fonts sub packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use BDF fonts for OpenType conversion - Rebuilt with fonttosfnt 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Align sizes up for growable LVs Resolves: RHEL-8036 Resolves: RHEL-19725 - Modified passphrase in stratis test Resolves: RHEL-8029 - Fix running tests in FIPS mode Resolves: RHEL-8029 - Set persistent allow-discards flag for newly created LUKS devices Resolves: RHEL-82430 - Do not remove PVs from devices file if disabled or doesn't exist Resolves: RHEL-84662 - Get the actual PV format size for LVMPV format Resolves: RHEL-74078 - Include additional information in PartitioningError Resolves: RHEL-8005 - Make ActionDestroyFormat optional when the device is also scheduled to be removed Resolves: RHEL-8008 Resolves: RHEL-8012 - Wipe end partition before creating it as well as the start Resolves: RHEL-76917 - Add a pre-wipe fixup function for LVM logical volumes Resolves: RHEL-68368 - iSCSI: don't crash when LUN ID >= 256 Resolves: RHEL-122858 - fix hang when BLKTRACESETUP fails and "-o -" is used - Related RHEL-54661 - Update to 5.72 - Bump release to rebuild for RHEL-9.5 - Fix ConfigurationDirectory startup warning Related: RHEL-71798 - Fix plugin_init() startup warnings Related: RHEL-68934 - Update to 5.83 Resolves: RHEL-94819 Resolves: RHEL-56073 Resolves: RHEL-1924 - Fix problem with menu handling Resolves: RHEL-103966 - Update to 5.85 Resolves: RHEL-142552 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Apply changes from RHEL 8 (#1811941, #1831158, #1951480) Resolves: rhbz#2051621 - Backport upstream PR 120 to fix segfault on invalid unit types Resolves: rhbz#2224578 - Add vendor ID for NVIDIA BMCs Resolves: rhbz#2218358 - Update /var/run to /run in ipmievd.service that systemd warns about Resolves: rhbz#2100475 - Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569 - Rebuilt for GSL 2.6. - Updated to 1.2.5 - No longer necessary to re-package sources: All problematic files have been re-licensed - All 19 patches are part of the 1.2.5 release and have been removed - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1950909 (Change what files are installed) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to release 1.6.0. - Add dependency on systemd version - Update to release 1.6.1. - Add issues resolved by release 1.6.1 - Resolves: RHEL-36001 - Resolves: RHEL-36664 - Resolves: RHEL-36667 - Resolves: RHEL-36691 - Update to release 1.6.5. - Resolves: RHEL-59512 - Update to release 1.6.8 - Resolves: RHEL-111711 - Update to release 1.6.0. - Add dependency on systemd version - Update to release 1.6.1. - Add issues resolved by release 1.6.1 - Resolves: RHEL-36001 - Resolves: RHEL-36664 - Resolves: RHEL-36667 - Resolves: RHEL-36691 - Update to release 1.6.5. - Resolves: RHEL-59512 - Update to release 1.6.8 - Resolves: RHEL-111711 - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Apply upstream Boost.Asio patch to resolve RHEL-67973 - Fix %patch directive compatibility with RPM 4.20 - Re-add the CMake config files provided by Boost - Add patch for cross-device filesystem::copy_file (RHEL-89888) - Fix the CMake config file for openmpi and mpich (RHEL-97588) - Add Boost.JSON patch for detecting endianness (RHEL-120655) - Update to 1.3.0 - Resolves: #RHEL-94597 - Update to 1.4.0 - Resolves: #RHEL-103125 - Update to 1.5.1 - Resolves: #RHEL-104335 - Update to 1.7.0 - Resolves: #RHEL-109555 - Update to 1.7.1 - Resolves: #RHEL-111339 - Update to 1.8.0 - Update to 1.10.0 - Resolves: #RHEL-125340 - Update to 1.12.0 - Resolves: RHEL-140335 - Update to 1.12.1 - Fix mount point check regression breaking bootc-image-builder - Resolves: RHEL-142112 - Update to 1.13.0 - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0 - Resolves: RHEL-151443 - Build on all architectures Related: https://issues.redhat.com/browse/RHEL-14388 - Sync spec with upstream Related: https://issues.redhat.com/browse/RHEL-14388 - https://github.com/coreos/bootupd/releases/tag/v0.2.17 Resolves: RHEL-14388 - https://github.com/coreos/bootupd/releases/tag/v0.2.18 backport patch to support GRUB console.cfg Resolves: RHEL-26439 - https://github.com/coreos/bootupd/releases/tag/v0.2.19 Resolves: RHEL-35887 - new version - https://github.com/coreos/bootupd/releases/tag/v0.2.27 Resolves: #RHEL-77736 - Add git to the build requires Resolves: #RHEL-77736, #RHEL-79091 - spec: remove ExcludeArch ix86 as this is c9s Resolves: #RHEL-77736, #RHEL-79091 Resolves: #RHEL-110494 - https://github.com/coreos/bootupd/releases/tag/v0.2.19 Resolves: RHEL-35887 - new version - https://github.com/coreos/bootupd/releases/tag/v0.2.27 Resolves: #RHEL-77736 - Add git to the build requires Resolves: #RHEL-77736, #RHEL-79091 - spec: remove ExcludeArch ix86 as this is c9s Resolves: #RHEL-77736, #RHEL-79091 Resolves: #RHEL-110494 - Backport https://github.com/coreos/bootupd/pull/1068 - Backport https://github.com/coreos/bootupd/pull/1074 Resolves: #RHEL-168652 - Update to v0.2.34 Resolves: #RHEL-173357 - Update to v0.2.35 Resolves: #RHEL-186008 - Initial commit on c9s - Initial gating test for bpftool - Fix LLVM feature detection - Update to BPF 6.12 rebase - Make kernel tarball dist independent of %{dist} - Update to BPF 6.14 stable backport - Update to BPF 6.17 stable backport - Rebase on bpftrace 0.20.3 (RHEL-30779) - Fix CVE allowing unprivileged users loading of compromised linux headers (RHEL-28765, CVE-2024-2313) - Fix bpftrace creating BPF programs with truncated names (RHEL-8502) - Rebase on bpftrace 0.20.4 - Fix CVE allowing unprivileged users loading of compromised linux headers (RHEL-28765, CVE-2024-2313) - Rebuild for bcc 0.30.0-4 - Fix latest build (not built in side tag) - Rebase on bpftrace 0.21.1 - Add LLVM 18 support (RHEL-28685) - Rebase on bpftrace 0.22.1 (RHEL-63881) - Add LLVM 19 support (RHEL-66061) - Rebase on bpftrace 0.23.5 (RHEL-78918) - Add LLVM 20 support (RHEL-81775) - Rebase on bpftrace 0.24.1 (RHEL-78998) - Rebuild with LLVM 21 (RHEL-108345) - Rebase on bpftrace 0.24.2 (RHEL-140903) - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: CVE-2025-25724 - Resolves: CVE-2025-5914 - Resolves: CVE-2026-4111 - Release bump - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - Resolves: CVE-2026-14164 - Related: CVE-2026-14164 - Resolves: CVE-2025-25724 - Resolves: CVE-2025-5914 - Resolves: CVE-2026-4111 - Release bump - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Explicitly specify JVM target version - update to https://github.com/containers/buildah/releases/tag/v1.40.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645 - update to https://github.com/containers/buildah/releases/tag/v1.40.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - update to https://github.com/containers/buildah/releases/tag/v1.41.0 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - update to https://github.com/containers/buildah/releases/tag/v1.41.1 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - update to https://github.com/containers/buildah/releases/tag/v1.41.3 - Related: RHEL-80816 - update to https://github.com/containers/buildah/releases/tag/v1.41.4 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.41.8 - Related: RHEL-111919 - update to https://github.com/containers/buildah/releases/tag/v1.43.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146099 - update to the latest content of https://github.com/containers/buildah/tree/release-1.43 (https://github.com/containers/buildah/commit/bbc4bd1) - Resolves: RHEL-95964 - update to https://github.com/containers/buildah/releases/tag/v1.43.1 - fixes CVE-2026-34986 - Resolves: RHEL-165035 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158759 - bump golang.org/x/crypto to v0.53.0 to fix CVE-2026-39832 and CVE-2026-39835 - Resolves: RHEL-188733 RHEL-190066 - rebuild for CVE-2026-39822 - Resolves: RHEL-193645 - new version - new version - new version - new version - new version - new version - new version - Rebase to 20191125 (#1768314) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to 20200330 (#1819022) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to byacc-2.0-20200910 (#1877980) - Rebase to byacc-2.0-20210109 (#1914591) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop not needed BR jarjar. Fixes FTBFS. - Upgrated to latest upstream version 4.0.11 - Added a patch to fix rpm build issue caused due to misconfiguration in upstream - Added required additional plugins required for build - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to latest upstream 4.0.16 release for JDK 17 support. - Drop not-needed jboss-modules BR. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop not needed BR jarjar. Fixes FTBFS. - Upgrated to latest upstream version 4.0.11 - Added a patch to fix rpm build issue caused due to misconfiguration in upstream - Added required additional plugins required for build - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to latest upstream 4.0.16 release for JDK 17 support. - Drop not-needed jboss-modules BR. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop not needed BR jarjar. Fixes FTBFS. - Upgrated to latest upstream version 4.0.11 - Added a patch to fix rpm build issue caused due to misconfiguration in upstream - Added required additional plugins required for build - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to latest upstream 4.0.16 release for JDK 17 support. - Drop not-needed jboss-modules BR. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix out of bounds access in BZ2_decompress Resolves: RHEL-65198 - Revert the previous commit (introduced a regression) Resolves: CVE-2019-12900 - Add the explicit Rquires to the base package Resolves: RHEL-138675 - Resolves: rhbz#2170868 - c-ares: buffer overflow in config_sortlist() due to missing string length check [rhel-9] - Resolves: rhbz#2209564 - CVE-2023-31124 c-ares: AutoTools does not set CARES_RANDOM_FILE during cross compilation [rhel-9] - Resolves: rhbz#2209556 - CVE-2023-31130 c-ares: Buffer Underwrite in ares_inet_net_pton() [rhel-9] - Resolves: rhbz#2209550 - CVE-2023-31147 c-ares: Insufficient randomness in generation of DNS query IDs [rhel-9] - Resolves: rhbz#2209520 - CVE-2023-32067 c-ares: 0-byte UDP payload Denial of Service [rhel-9.3.0] - Resolves: rhbz#2210370 - Rebase c-ares for RHEL 9.3 - Resolves: RHEL-26529 - Out of bounds read in ares__read_line() [rhel-9] - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - FTBFS with GCC 10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - make is no more in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Allow empty array of operands for certain operators in CFF fonts - Resolves: #1817958 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.17.4 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport an upstream patch to fix generating PDF font names (#1939399) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2020-35492 (#1911486) - Add git as BR (#1911486) - Allow empty array of operands for certain operators in CFF fonts - Resolves: #1817958 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.17.4 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport an upstream patch to fix generating PDF font names (#1939399) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2020-35492 (#1911486) - Add git as BR (#1911486) - Allow empty array of operands for certain operators in CFF fonts - Resolves: #1817958 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.17.4 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport an upstream patch to fix generating PDF font names (#1939399) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2020-35492 (#1911486) - Add git as BR (#1911486) - Allow empty array of operands for certain operators in CFF fonts - Resolves: #1817958 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.17.4 - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Backport an upstream patch to fix generating PDF font names (#1939399) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2020-35492 (#1911486) - Add git as BR (#1911486) - Update to 1.14.2; this adds new APIs, but is ABI-backwards-compatible - Restore removal of pre-built documentation with its minified JS bundle - Switch from autotools to meson; enable the tests, since the meson build system permits us to use a shared boost library - Install examples in the -doc subpackage - Prepare for future upgrade to API/ABI version 1.16 by introducing virtual Provides for a name for API/ABI version 1.0: cairomm1.0. This will be the name of a future package that continues to provide API/ABI version 1.0 after the upgrade. - Update comments based on the new plan for the version 1.16 API/ABI - Fix typo %{_?isa} for %{?_isa} in virtual Provides - Tidy up BR’s, including dropping make - Working (but weak, dependent on SHA1) source signature verification - Added API/ABI version to descriptions - Verify source with new strong signatures from upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Fix CVE-2025-68114 (memory corruption) and CVE-2025-67873 (heap buffer overflow) Resolves: RHEL-137760 - Rebuild for rhel-9.8 Resolves: RHEL-137760 - Rebuild for rhel-9.8.z - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Fix upgrades from non-alternativized versions/packages - related: RHEL-13739 - Update to version 0.3.8 - resolves: RHEL-22301 - Fix spnego authentication - resolves: RHEL-24924 - Fix requirement on cepces-selinux - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.17 - related: RHEL-121734 - related: RHEL-13739 - Update to version 0.3.8 - resolves: RHEL-22301 - Fix spnego authentication - resolves: RHEL-24924 - Fix requirement on cepces-selinux - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.17 - related: RHEL-121734 - related: RHEL-13739 - Update to version 0.3.8 - resolves: RHEL-22301 - Fix spnego authentication - resolves: RHEL-24924 - Fix requirement on cepces-selinux - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.17 - related: RHEL-121734 - getcert should return unique error on duplicates (RHEL-22302) - Update to upstream 0.79.20 - Update to upstream 0.79.21 - Initial package version - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop -attribute-format patch, causes other issues (bz 1850198) - Version 0.15.1 - Drop upstreamed -format-spec patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add -fail-macros patch - Version 0.15.2 - Drop upstreamed -fail-macros patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build with subinit support in RHEL - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix the pkgconfig file for lib64 (#2016941) - Drop -attribute-format patch, causes other issues (bz 1850198) - Version 0.15.1 - Drop upstreamed -format-spec patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add -fail-macros patch - Version 0.15.2 - Drop upstreamed -fail-macros patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build with subinit support in RHEL - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix the pkgconfig file for lib64 (#2016941) - SELinux userspace 3.4 release - SELinux userspace 3.5-rc1 release - SELinux userspace 3.5-rc2 release - SELinux userspace 3.5-rc3 release - SELinux userspace 3.5 release - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - Update to 3.34.0 - Rebuilt for libgnome-desktop soname bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.38.0 + cheese-3.38.0-2 - Fix infinite loop on exit - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add isa to gstreamer plugin Requires (#1988932) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to gnome-browser-connector-42.1 Resolves: #2204484 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Random memory override Resolves: rhbz#2180445 - Rebuilt for gating Related: rhbz#2180445 - Rebuilt for gating Related: rhbz#2180445 - CVE-2023-37464 cjose: AES GCM decryption uses the Tag length from the actual Authentication Tag provided in the JWE Resolves: rhbz#2223308 - Publishing cjose devel package Resolves: RHEL-18066 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Update to 17.0.6 - Remove compat libs - Add back compat libs until all necessary packages have been rebuilt. - Remove compat libs - Update to 18.1.6 - Default to DWARF4 - Rebuild - Update to 18.1.8 - Link with ld on 32-bit architectures - Remove clang 17 compat lib - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Bump release-38 - Bump to release-38-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump release-39-alpha0 - Bump to release-39-alpha1 - Bump to release-39-alpha4 - Bump to release-39-beta - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump to release-39. Related: rhbz#1963078 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump release-38 - Bump to release-38-1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Bump release-39-alpha0 - Bump to release-39-alpha1 - Bump to release-39-alpha4 - Bump to release-39-beta - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump to release-39. Related: rhbz#1963078 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to clevis-20 Resolves: #RHEL-29282 - Rebase to clevis-21 Resolves: #RHEL-60257 - Fix dracut startup issue Resolves: #RHEL-61184 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Groom clevis.spec Resolves: #RHEL-65458 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Rebase to clevis-20 Resolves: #RHEL-29282 - Rebase to clevis-21 Resolves: #RHEL-60257 - Fix dracut startup issue Resolves: #RHEL-61184 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Groom clevis.spec Resolves: #RHEL-65458 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Rebase to clevis-20 Resolves: #RHEL-29282 - Rebase to clevis-21 Resolves: #RHEL-60257 - Fix dracut startup issue Resolves: #RHEL-61184 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Groom clevis.spec Resolves: #RHEL-65458 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Rebase to clevis-20 Resolves: #RHEL-29282 - Rebase to clevis-21 Resolves: #RHEL-60257 - Fix dracut startup issue Resolves: #RHEL-61184 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Groom clevis.spec Resolves: #RHEL-65458 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Initial beta package for RHEL9 - Align to 0.1.0 upstream version - Rebase to clevis-20 Resolves: #RHEL-29282 - Rebase to clevis-21 Resolves: #RHEL-60257 - Fix dracut startup issue Resolves: #RHEL-61184 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Groom clevis.spec Resolves: #RHEL-65458 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Rebase to clevis-20 Resolves: #RHEL-29282 - Rebase to clevis-21 Resolves: #RHEL-60257 - Fix dracut startup issue Resolves: #RHEL-61184 - Fix to start pcscd appropriately Resolves: #RHEL-61612 - Split PKCS#11 files into clevis-pin-pkcs11 package Resolves: #RHEL-61941 - Groom clevis.spec Resolves: #RHEL-65458 - TPM2: use first PCR algorithm bank supported by TPM as default Resolves: #RHEL-65468 - Include tpm2_getcap as dracut required binary Resolves: #RHEL-68638 - Include socat, openssl as PKCS#11 pin requirements Resolves: #RHEL-72982 - Add clevis user to tss group via sysusers Resolves: RHEL-132187 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - ci-Prevent-NM-from-handling-DNS-when-network-interfaces.patch [RHEL-65768] - Resolves: RHEL-65768 ([RHEL-9] Prevent NM from handling DNS when network interfaces have DNS config) - Rebase to 24.4 [RHEL-66251] - Resolves: RHEL-66251 ([RHEL-9] Rebase cloud-init to 24.4 version) - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334] - Resolves: RHEL-74334 ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6) - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122] - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122] - Resolves: RHEL-71122 (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] ) - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361] - Resolves: RHEL-76361 ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network) - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703] - Resolves: RHEL-81703 (DataSourceNoCloudNet network configuration is ineffective - c9s) - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658] - Resolves: RHEL-88658 (Cloud-Init Backport Optimization Features on Alibaba Cloud) - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615] - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615] - Fix missing patch [RHEL-101692] - Resolves: RHEL-100615 (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7]) - Resolves: RHEL-101692 (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors") - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128876] - Resolves: RHEL-128876 ([rhel-9] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf) - Add-AlmaLinux-OS-and-CloudLinux-OS-support-to.patch - Rebase to 24.4 [RHEL-66251] - Resolves: RHEL-66251 ([RHEL-9] Rebase cloud-init to 24.4 version) - ci-downstream-Revert-feat-Use-NetworkManager-renderer-b.patch [RHEL-74334] - Resolves: RHEL-74334 ([rhel-9.6] Suggest to continue using sysconfig as the default network renderer in rhel-9.6) - ci-Use-log_with_downgradable_level-for-user-password-wa.patch [RHEL-71122] - ci-downstream-set-deprecation-boundary-version.patch [RHEL-71122] - Resolves: RHEL-71122 (Suggest to change some log messages from warning to info after rebase cloud-init-24.4 [RHEL-9.6] ) - ci-net-sysconfig-do-not-remove-all-existing-settings-of.patch [RHEL-76361] - Resolves: RHEL-76361 ([c9s] cloud-init remove 'NOZEROCONF=yes' from /etc/sysconfig/network) - ci-fix-NM-reload-and-bring-up-individual-network-conns-.patch [RHEL-81703] - Resolves: RHEL-81703 (DataSourceNoCloudNet network configuration is ineffective - c9s) - ci-feat-aliyun-datasource-support-crawl-metadata-at-onc.patch [RHEL-88658] - Resolves: RHEL-88658 (Cloud-Init Backport Optimization Features on Alibaba Cloud) - ci-fix-Don-t-attempt-to-identify-non-x86-OpenStack-inst.patch [RHEL-100615] - ci-fix-strict-disable-in-ds-identify-on-no-datasources-.patch [RHEL-100615] - Fix missing patch [RHEL-101692] - Resolves: RHEL-100615 (CVE-2024-6174 cloud-init: From CVEorg collector [rhel-9.7]) - Resolves: RHEL-101692 (c9s dist-git missing patch "downstream: Retain exit code in cloud-init status for recoverable errors") - ci-downstream-Do-not-override-changes-in-disable-sshd-k.patch [RHEL-128876] - Resolves: RHEL-128876 ([rhel-9] cloud-init upgrade is overwriting modifications in disable-sshd-keygen-if-cloud-init-active.conf) - ci-fix-Pass-interface-string-to-get_newest_lease-6648.patch [RHEL-159095] - ci-fix-cloudstack-Improve-domain-name-DHCP-lease-lookup.patch [RHEL-159095] - ci-downstream-fix-test_cloudstack.py-since-pytest-fixtu.patch [RHEL-159095] - Resolves: RHEL-159095 (CLONE - [GSS][Secure Support] [RHEL-9] cloud-init requests lease before DHCP can provide one [rhel-9.8.z]) - Add-AlmaLinux-OS-and-CloudLinux-OS-support-to.patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 0.33 Resolves: bz#2133248 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - pull in some upstream fixes (PR, previous commit) - use latest %cmake macros - s/define/global/ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - pull in some upstream fixes (PR, previous commit) - use latest %cmake macros - s/define/global/ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable LTO Resolves: rhbz#1986479 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 Disable LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable LTO Resolves: rhbz#1986492 - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Make clang-rpm-macros requires conditional on rpm-build - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Make clang-rpm-macros requires conditional on rpm-build - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Make clang-rpm-macros requires conditional on rpm-build - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Make clang-rpm-macros requires conditional on rpm-build - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Make clang-rpm-macros requires conditional on rpm-build - cmake-3.31.8 - macros: Fix missing asterisk in ctest macro - Make clang-rpm-macros requires conditional on rpm-build - New upstream release - New upstream release - remove empty customizations from blueprint when creating one Integrates with packit, tmt, and testing farm. - New upstream release - New upstream release - New upstream release - Bug fixes and translation updates - Translations and dependency updates - don't initialise a git repo in gating tests (fixes fedora gating) - Performance and stability improvements - Bug fixes and translation updates - Bug fixes and translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Packaging fixes and translation updates - Convert license headers to SPDX format - Improved UX for Disks and Network interface tables - Bug fixes and translation updates - Bug fixes and translation updates - Memory usage now shows numbers reported by the guest (RHEL-116731) - Port forwarding for user session VMs - "Shutdown and restart" action - Faster startup - New virtual machines don't get SPICE graphics anymore - Support for network port forwarding - Bug fixes and translation updates - Performance improvements - Translation updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Bug fixes and translation updates - Convert license headers to SPDX format - Site-specific branding support - Bug fixes and translation updates - Bug fixes and translation updates - Translations and dependency updates - Performance and stability improvements - Translation and dependency updates - Dependency updates - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Packaging fixes and translation updates - Convert license headers to SPDX format - Bug fixes and translation updates - Package manifests: Add `any` test - Bug fixes and translation updates - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Firewall ports can be deleted individually - Release workflow fixes - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - Package manifests: Add `any` test - Bug fixes and translation updates - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Firewall ports can be deleted individually - Release workflow fixes - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - Package manifests: Add `any` test - Bug fixes and translation updates - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Firewall ports can be deleted individually - Release workflow fixes - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - Bug fixes and translation updates - List stopped quadlets - Translations and dependency updates - Support stopping/starting/restart quadlets - Performance and stability improvements - Bug fixes and translation updates - Release automation bugfix - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Packaging fixes and translation updates - Convert license headers to SPDX format - Rebase to upstream release 16 - Config: Add sssd-proxy requirement - Commits from release 15 - Config: Update to authselect with-tlog feature - stylelint: handle stylelint-scss deprecation - Add ruff configuration - package.json: drop flowtype plugin - package.json: drop po2json - package.json: document the required nodejs version - fmf: Plumb through $TEST_* variables for unexpected messages - tests: Use mc for testPlayBinary - package.json: drop deprecated eslint-plugin-standard - Revert "build: add support for /pybridge scenario" - Player: Stop making the Terminal object state - build.js: support flags - packaging: Update spec License: to SPDX format - build.js: Fix LINT env variable check - Tests: Allow charset journal messages - Update to the new root creation function - package.json: Bump stylelint to 15 - test: add check for sssd config id_provider proxy - Tests: Allow invalid non-UTF8 journal messages - Add xterm-canvas-addon dependency for rendering - Minor Eslint fixes - Tests: Update data list to PF5 for testAppMenu - Update org.cockpit-project.session-recording.metainfo.xml - Makefile: bump our test/common dependency - patternfly-5-overrides should be auto-imported by the page.scss file - Drop obsolete pf-m-redhat-font class - Commits from release 14 - Upgrade to PatternFly 5 Alpha - Makefile: Update Cockpit lib to da5abbb4245b0455cc8b610efe01e684 - package.json: Pin down versions of @patternfly/react-{styles,icons} - Makefile: Update Cockpit lib to 947f1753867e3924b9617aaace936225 - Makefile: Fix watch dependencies - Update release.yml - Automate the release process - Rebase to upstream release 17 - Config: Use authselect enable-feature when possible - Test: Move from CDP to BiDi - Replace jQuery extend() with standard JS spread - Convert to TypeScript - Convert Application to a functional component - package.json: Drop date-fns - Various test fixes and build related fixes - Rebase to upstream release 20 - Bug fixes and translation updates - Package manifests: Add `any` test - Bug fixes and translation updates - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Firewall ports can be deleted individually - Release workflow fixes - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - Package manifests: Add `any` test - Bug fixes and translation updates - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Firewall ports can be deleted individually - Release workflow fixes - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - Package manifests: Add `any` test - Bug fixes and translation updates - networking: fix renaming of bridges and other groups (RHEL-117883) - bridge: fix OpenSSH_10.2p1 host key detection - Firewall ports can be deleted individually - Release workflow fixes - Convert documentation to AsciiDoc - Work around Firefox 146/147 bug (rhbz#2422331) - Bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild - ws: Remove obsolete pam_cockpit_cert module - shell: add StartTransientUnit as a sudo alternative - systemd: Allow editing timers created by Cockpit - Convert license headers to SPDX format - ws: Prevent remote code execution with SSH argument injection (RHEL-158310) - node: update lodash dependency (RHEL-164196) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix building against libglvnd-provided EGL headers - Update to 1.22.6 - Update to 1.22.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Provide a sysusers.d file - Bump release to match upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Provide a sysusers.d file - Bump release to match upstream - Import from RHEL 8 and old Fedora; port to libidn2 - Resolves: #1944157 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - new compat library - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - use power7 cpu/tuning and filter out -march=z14 -mtune=z15 (#1951315) - invoke make with MAKEINFO=missing (#1951315) - bump for rebuild - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - build with -Wl,-z,relro,-z,now (#2044834) - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142723 - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142723 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165863 - Fixes cve-2023-0286 X.400 address type confusion in X.509 GeneralName Resolves: RHEL-88969 - Fixes CVE-2025-69419 OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing Resolves: RHEL-142723 - Fixes CVE-2026-28390: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing Resolves: RHEL-165863 - Fixes CVE-2026-45447: Heap Use-After-Free in OpenSSL PKCS7_verify() - 20141121-14 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20141121-15 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20141121-16 🐞 Workaround Fedora problems created by rpm commit 93604e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20141121-18 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1962000 - Add gating tests from rhel-8 - Resolves:rhbz#1962000 - Add missing gating tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - update to https://github.com/containers/composefs/releases/tag/v1.0.7 - Related: RHEL-60277 - update to https://github.com/containers/composefs/releases/tag/v1.0.7 - Related: RHEL-60277 - bump epoch to preserve upgrade path from rhel 8.10 - Related: RHEL-31950 - update to https://github.com/containers/conmon/releases/tag/v2.1.11 - Related: RHEL-27608 - update to https://github.com/containers/conmon/releases/tag/v2.1.12 - Related: RHEL-27608 - update to https://github.com/containers/conmon/releases/tag/v2.1.13 - Resolves: RHEL-80820 - update to https://github.com/containers/conmon/releases/tag/v2.2.0 - Resolves: RHEL-147114 - update to https://github.com/containers/conmon/releases/tag/v2.2.1 - enable RELRO - Related: RHEL-111919 - update to https://github.com/containers/conmon/releases/tag/v2.1.13 - Resolves: RHEL-80820 - update to https://github.com/containers/conmon/releases/tag/v2.2.0 - Resolves: RHEL-147114 - update to https://github.com/containers/conmon/releases/tag/v2.2.1 - enable RELRO - Related: RHEL-111919 - reset create_pid after waitpid to prevent signaling unrelated processes - Resolves: RHEL-178025 - conntrackd: set default hashtable buckets and max entries if not specified - config: Fix -Wimplicit-function-declaration - network: Fix -Wstrict-prototypes - build: don't suppress various warnings - build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9 - New version 1.4.7 - Explicitly depend on libnetfilter_conntrack-1.0.9 - conntrack: Fix potential array out of bounds access - Bump release for RHEL9.5 - Update to 0.20.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.21 - Require util-linux >= 2.36-1 - Remove files related to the issuegen and motdgen executables - Update to 0.21.1 - Make scripts subpackage-specific, addresses #1929844 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - Update to 0.21.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Remove requirement for `fedora-release` and require `/etc/issue.d` - Update to 0.21.3 - Update to 0.20.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.21 - Require util-linux >= 2.36-1 - Remove files related to the issuegen and motdgen executables - Update to 0.21.1 - Make scripts subpackage-specific, addresses #1929844 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - Update to 0.21.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Remove requirement for `fedora-release` and require `/etc/issue.d` - Update to 0.21.3 - Update to 0.20.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.21 - Require util-linux >= 2.36-1 - Remove files related to the issuegen and motdgen executables - Update to 0.21.1 - Make scripts subpackage-specific, addresses #1929844 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - Update to 0.21.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Remove requirement for `fedora-release` and require `/etc/issue.d` - Update to 0.21.3 - Update to 0.20.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.21 - Require util-linux >= 2.36-1 - Remove files related to the issuegen and motdgen executables - Update to 0.21.1 - Make scripts subpackage-specific, addresses #1929844 - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - Update to 0.21.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Remove requirement for `fedora-release` and require `/etc/issue.d` - Update to 0.21.3 - Update to latest upstream version Resolves: #1817552 - Update to latest upstream version Resolves: #1856118 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to latest upstream version Resolves: #1881276 - Update to latest upstream version Resolves: #1893002 - Update to latest upstream version Resolves: #1902975 - Update to latest upstream version Resolves: #1911871 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - sync TMT tests and plan from upstream - Resolves: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.236.0 - Resolves: RHEL-80473 - update to https://github.com/containers/container-selinux/releases/tag/v2.237.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.238.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.239.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.240.0 - Related: RHEL-80816 - update to https://github.com/containers/container-selinux/releases/tag/v2.241.0 - Resolves: RHEL-112187 - update to https://github.com/containers/container-selinux/releases/tag/v2.242.0 - Related: RHEL-111919 - update to https://github.com/containers/container-selinux/releases/tag/v2.244.0 - Resolves: RHEL-112187 - update to https://github.com/containers/container-selinux/releases/tag/v2.245.0 - Related: RHEL-111919 - rebuild with updated dependencies: [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0, aardvark-dns and netavark 1.9.0 - Related: Jira:RHEL-2112 - Fix typo in package Summary - Resolves: RHEL-124398 - update to https://github.com/containernetworking/plugins/releases/tag/v1.5.1 - Related: RHEL-27608 - rebuild for CVE-2024-24791 - Resolves: RHEL-47166 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1 - Resolves: RHEL-89428 - rebuild for CVE-2025-22871 - Resolves: RHEL-90030 - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0 - Related: RHEL-111919 - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146101 - rebuild for CVE-2024-24791 - Resolves: RHEL-47166 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.0 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.1 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.6.2 - Related: RHEL-60277 - update to https://github.com/containernetworking/plugins/releases/tag/v1.7.1 - Resolves: RHEL-89428 - rebuild for CVE-2025-22871 - Resolves: RHEL-90030 - update to https://github.com/containernetworking/plugins/releases/tag/v1.8.0 - Related: RHEL-111919 - update to https://github.com/containernetworking/plugins/releases/tag/v1.9.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146101 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158763 - add files section for extra subpackage - Resolves: RHEL-80525 - rebuild to preserve upgrade path - Related: RHEL-80816 - fetch TMT podman revdep tests from podman dist-git - needs at least podman 5.4.0-8.el9 - Related: RHEL-80816 - update vendored components - Related: RHEL-80816 - update shortnames and vendored components - Related: RHEL-80816 - update vendored components for RHEL9.7 - Related: RHEL-80816 - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images - Related: RHEL-111919 - update shortnames and vendored components for RHEL-9.8 - Resolves: RHEL-146878 - do not allow the shortname to contain registry - Related: RHEL-111919 - convert to container_libs - Related: RHEL-111919 - add files section for extra subpackage - Resolves: RHEL-80525 - rebuild to preserve upgrade path - Related: RHEL-80816 - fetch TMT podman revdep tests from podman dist-git - needs at least podman 5.4.0-8.el9 - Related: RHEL-80816 - update vendored components - Related: RHEL-80816 - update shortnames and vendored components - Related: RHEL-80816 - update vendored components for RHEL9.7 - Related: RHEL-80816 - Update rhel-shortnames-overrides to include complete list of UBI/RHEL images - Related: RHEL-111919 - update shortnames and vendored components for RHEL-9.8 - Resolves: RHEL-146878 - do not allow the shortname to contain registry - Related: RHEL-111919 - convert to container_libs - Related: RHEL-111919 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Specify all perl dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961994 - Add gating tests from rhel-8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for lua 5.4.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - bumped to 4.0 to resolve remvoed rpm 4.17 removing arg from global table - added requires and orderWithRequires of findutils to provide find and xargs (rh1965305) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream release - new version - Update to latest upstream - Restore single-decimal precision to stream output Backport https://github.com/coreos/coreos-installer/pull/1654 - Use the full path for the 'root=' kernel arg when rootfs on mpath Backport https://github.com/coreos/coreos-installer/pull/1677 - new version - Backport https://github.com/coreos/coreos-installer/pull/1699 - new version - New upstream release - new version - Update to latest upstream - Restore single-decimal precision to stream output Backport https://github.com/coreos/coreos-installer/pull/1654 - Use the full path for the 'root=' kernel arg when rootfs on mpath Backport https://github.com/coreos/coreos-installer/pull/1677 - new version - Backport https://github.com/coreos/coreos-installer/pull/1699 - new version - New upstream release - new version - Update to latest upstream - Restore single-decimal precision to stream output Backport https://github.com/coreos/coreos-installer/pull/1654 - Use the full path for the 'root=' kernel arg when rootfs on mpath Backport https://github.com/coreos/coreos-installer/pull/1677 - new version - Backport https://github.com/coreos/coreos-installer/pull/1699 - new version - Resolves: RHEL-24163 - Report crypto errors back to cfg reload (RHEL-24163) - Resolves: RHEL-65699 - New upstream release (RHEL-65699) - Resolves: RHEL-84616 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-122942 - New upstream release (RHEL-122942) - Resolves: RHEL-24163 - Report crypto errors back to cfg reload (RHEL-24163) - Resolves: RHEL-65699 - New upstream release (RHEL-65699) - Resolves: RHEL-84616 - totemsrp: Check size of orf_token msg (fixes CVE-2025-30472) - Resolves: RHEL-122942 - New upstream release (RHEL-122942) - Resolves: RHEL-163816 - Resolves: RHEL-163837 - totemsrp: Return error if sanity check fails (fixes CVE-2026-35091) - totemsrp: Fix integer overflow in memb_join_sanity (fixes CVE-2026-35092) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - Rebase to upstream crash 8.0.5 - Rebase to upstream crash 8.0.6 - Rebase to upstream crash 9.0.0 - vmware_guestdump: Version 7 support - Fix incorrect task state during exit - Add multi-threads support in crash target - Call cmd_bt silently after "set pid" - x86_64: Add gdb multi-stack unwind support - arm64: Add gdb multi-stack unwind support - ppc64: Add gdb multi-stack unwind support - Fix the issue of "page excluded" messages flooding - Fix "kmem -p" option on Linux 6.16-rc1 and later kernels - x86_64: filter unwanted warning message for "bt -T" cmd - doc: Update requirements for building on Fedora - gdb: Fix a regression for eppic extension on gdb-16.2 - Fix crash initialization failure on LoongArch with recent GDB versions - gdb: Disable DT_DEBUG lookup by GDB inside the vmcore - Add blk_mq shared tags support for dev -d/-D - Rebase to upstream crash 9.0.1 - Debrand for AlmaLinux - Fix the hardening issue "FAIL: bind-now test because not linked with -Wl,-z,now" - Rebuild for the compatibility issue - Support module memory layout change on Linux 6.4 - Change test to compare contents instead of checksum, cleanup (RhBug:2130179) - Add zstd compression support (RHEL-67689) - Add git build require, needed for binary patches (RHEL-67689) - Change test to compare contents instead of checksum, cleanup (RhBug:2130179) - Add zstd compression support (RHEL-67689) - Add git build require, needed for binary patches (RHEL-67689) - Update to 3.19 - Drop upstreamed patches - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Update to 3.19 - Drop upstreamed patches - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - Update to 3.19 - Drop upstreamed patches - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - update to https://github.com/containers/crun/releases/tag/1.19.1 - Related: RHEL-60277 - update to https://github.com/containers/crun/releases/tag/1.20 - Related: RHEL-60277 - fix gating.yaml - Related: RHEL-80816 - update to https://github.com/containers/crun/releases/tag/1.21 - Related: RHEL-80816 - update to https://github.com/containers/crun/releases/tag/1.22 - Related: RHEL-80816 - update to https://github.com/containers/crun/releases/tag/1.23 - Related: RHEL-80816 - update to https://github.com/containers/crun/releases/tag/1.23.1 - Related: RHEL-80816 - update to https://github.com/containers/crun/releases/tag/1.24 - Related: RHEL-111919 - update to https://github.com/containers/crun/releases/tag/1.26 - Resolves: RHEL-143228 - update to https://github.com/containers/crun/releases/tag/1.27 - fixes CVE-2026-30892 crun: crun: Privilege escalation due to incorrect parsing of the `--user` option [rhel-9.8] - Resolves: RHEL-161441 - Update cscope to 15.9-26 from Fedora (RHEL-65465) - Fix signal handling at exit - Minor edits in the rpm scripts and the changelog - Make xemacs a bcond - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Revert the cups-libs license identifier to the "legacy" format - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - Revert the cups-libs license identifier to the "legacy" format - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - Revert the cups-libs license identifier to the "legacy" format - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - Revert the cups-libs license identifier to the "legacy" format - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - RHEL-46785 - fix errors during installability tests about modified cups-browsed.conf - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - fix posttrans script - fix return value when libppd is not used - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - fix posttrans script - fix return value when libppd is not used - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - CVE-2026-64612 cups-filters: handle libpng errors via longjmp()/setjmp() to prevent process abort on malformed PNG files - RHEL-46785 - fix errors during installability tests about modified cups-browsed.conf - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - fix posttrans script - fix return value when libppd is not used - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - CVE-2024-47175 cups-filters: remote command injection via attacker controlled data in PPD file - CVE-2024-47076 cups-filters: `cfGetPrinterAttributes` API does not perform sanitization on returned IPP attributes - CVE-2024-47176 cups-filters: cups-browsed binds on UDP INADDR_ANY:631 trusting any packet from any source - RHEL-17124 [cups-browsed] Prints to remote RAW queues are converted to PDF documents - RHEL-70015 Double-sided printing issues on Thunderbird or Firefox // HP printers - RHEL-6519 RFE: Synchronize server defaults with clients - RHEL-65587 texttopdf omits Chinese characters when creating PDF documents - RHEL-93931 RFE: Add Allow list for FoomaticRIPCommandLine PPD values - fix posttrans script - fix return value when libppd is not used - RHEL-117507 cups-filter: output of landscape print have the top and left portions cut off - CVE-2026-64612 cups-filters: handle libpng errors via longjmp()/setjmp() to prevent process abort on malformed PNG files - Revert the cups-libs license identifier to the "legacy" format - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - Revert the cups-libs license identifier to the "legacy" format - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Remove redundant dependency on polkit-gnome - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Revert the cups-libs license identifier to the "legacy" format - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-6526 cups source rpm doesn't actually build lspp support - fix memory leaks from LSPP - RHEL-60343 CVE-2024-47175 cups: remote command injection via attacker controlled data in PPD file - RHEL-68414 Inability to disable weak ciphers in CUPS configuration - Add NoSystem SSLOptions value - RHEL-112435 CVE-2025-58060 cups: Authentication Bypass in CUPS Authorization Handling - RHEL-113078 CVE-2025-58364 cups: Null Pointer Dereference in CUPS ipp_read_io() Leading to Remote DoS - RHEL-102665 The KONICA MINOLTA C352 is not distributed using cups-browsed and the included ppd file - RHEL-122629 [image-mode] Missing /var/log/cups - RHEL-129747 CVE-2025-58436 cups: Slow client communication leads to a possible DoS attack - RHEL-129740 CVE-2025-61915 cups: Local denial-of-service via cupsd.conf update and related issues - RHEL-147214 - endless poll loop in http_write when POLLHUP is returned - RHEL-177957 CVE-2026-34980 cups: control character injection in option values - Rebase to v78 - Add support for legacy monitor.conf file location - Fix a test failure. - Resolves: RHEL-10382 - Resolves: RHEL-8204 - Resolves: RHEL-29151 - Add explicit package version requirements. (Jeff Moyer) - Related: RHEL-29151 - Rebase to v82 - Resolve: RHEL-97669 - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly for shared mailboxes - cyrus-imapd.spec: rename patches to correspond with others - Update to 3.4.8, fixing CVE-2024-34055 - tls: enable automatic DH parameter selection Resolves: RHEL-70762 - Remove sscg option --package from cyrus-imapd-init.service Resolves: RHEL-132242 - Create directory structure under /var using tmpfiles.d Resolves: RHEL-129881 - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly for shared mailboxes - cyrus-imapd.spec: rename patches to correspond with others - Update to 3.4.8, fixing CVE-2024-34055 - tls: enable automatic DH parameter selection Resolves: RHEL-70762 - Remove sscg option --package from cyrus-imapd-init.service Resolves: RHEL-132242 - Create directory structure under /var using tmpfiles.d Resolves: RHEL-129881 - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly for shared mailboxes - cyrus-imapd.spec: rename patches to correspond with others - Update to 3.4.8, fixing CVE-2024-34055 - tls: enable automatic DH parameter selection Resolves: RHEL-70762 - Remove sscg option --package from cyrus-imapd-init.service Resolves: RHEL-132242 - Create directory structure under /var using tmpfiles.d Resolves: RHEL-129881 - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Remove debug log spam in digestmd5 plugin (RHEL-82172) - Rebase to v78 - Add support for legacy monitor.conf file location - Fix a test failure. - Resolves: RHEL-10382 - Resolves: RHEL-8204 - Resolves: RHEL-29151 - Add explicit package version requirements. (Jeff Moyer) - Related: RHEL-29151 - Rebase to v82 - Resolve: RHEL-97669 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Override upstream sysusers.d confguration (#2118226) - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) - Fix CVE-2023-34969 (#2213402) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Override upstream sysusers.d confguration (#2118226) - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) - Fix CVE-2023-34969 (#2213402) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Override upstream sysusers.d confguration (#2118226) - Fix CVE-2022-42010 (#2133647) - Fix CVE-2022-42011 (#2133641) - Fix CVE-2022-42012 (#2133635) - Fix CVE-2023-34969 (#2213402) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.39.1 - Update to 0.40.0 - Avoid hardcoding man page compression - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Use full path for dconf in posttrans script (#1950829) - Backport patch for permissions restore - Indicate bundle of GVDB - Resolves: #1974362 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.36.2 - Update to 3.36.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.91 - Update to 3.38.0 - Update to 3.38.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.3 - Remove old conflicts with dconf package - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to the latest version (RHEL-77191). - Add 0001-debugedit-Add-support-for-.debug_str_offsets-DW_FORM.patch - Add 0003-elf_strptr.patch - Add 0004-compress.patch - Add 0005-writable.patch - Add 0001-debug_str_offsets-header-version-and-padding-are-2-b.patch - Add 0001-debugedit-Handle-unused-.debug_str_offsets-entries.patch - Add 0001-find-debuginfo-Fix-skip_mini-.gnu_debugdata-handling.patch - Add 0006-pr32157-handle-dwarf5-DW_UT_type-unit-type-2.patch - Add 0001-Add-basic-find-debuginfo-script-tests.patch - Add debugedit-5.0-find-debuginfo-tests-fixups.patch - 2.37-5 ✅ Rebuild with fonts-rpm-macros 2.0.2 - 2.37-6 ✅ Lint, lint, lint and lint again - 2.37-7 ✅ Remove F32 compatibility packages - 2.37-12 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.37-13 🐞 Workaround Fedora problems created by rpm commit 93604e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.37-15 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.37-5 ✅ Rebuild with fonts-rpm-macros 2.0.2 - 2.37-6 ✅ Lint, lint, lint and lint again - 2.37-7 ✅ Remove F32 compatibility packages - 2.37-12 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.37-13 🐞 Workaround Fedora problems created by rpm commit 93604e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.37-15 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.37-5 ✅ Rebuild with fonts-rpm-macros 2.0.2 - 2.37-6 ✅ Lint, lint, lint and lint again - 2.37-7 ✅ Remove F32 compatibility packages - 2.37-12 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.37-13 🐞 Workaround Fedora problems created by rpm commit 93604e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.37-15 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Support files conforming to 1.5 of the specification (#2107278) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.alpha - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Drop amtk dependency Related: #1948445 - Resolves: rhbz#1971430 Update license to GPLv3+ - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.alpha - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Drop amtk dependency Related: #1948445 - Resolves: rhbz#1971430 Update license to GPLv3+ - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.1 - update to 1.3-20191210 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 1.3-20200228 - update to 1.3-20200327 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 1.3-20201126 - update to 1.3-20210117 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.63 (bug #1778338) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.64. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to disruptor upstream release v3.4.2 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove unneeded buildrequires on jmock and hamcrest - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update disruptor to 3.4.4 (#1953941) - Build with OpenJDK 8 - new upstream version - Rebuild for posix lock issue fix Related: RHEL-143037 - Trigger build Related: RHEL-143037 - package: remote_location() takes basedir into account (RHEL-71125) - usage help: don't mark mandatory option parameters as optional (RHEL-63958) - Add dnf4 provides and symlink /usr/bin/dnf4 -> /usr/bin/dnf-3 (RHEL-82310) - man page: don't mark mandatory option parameters as optional (RHEL-63958) - Mark transient transactions in DNF history (RHEL-84512) - Warn/disallow changes outside /usr, /etc with --transient (RHEL-84499) - Introduce $releasever_major, $releasever_minor variables, shell-style variable substitution (RHEL-65817) - automatic: Expand email_to in command_email emitter to individual arguments (RHEL-94321) - autoremove: when a dangling protected dependency is found produce a wanrning and skip it (RHEL-76112) - bootc: unlock only if /usr is read-only (RHEL-138512) - Added patch for almalinux bugtracker - Initial commit on c9s - Resolves: RHEL-62197 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.5 - Resolves: RHEL-139901 - Initial commit on c9s - Resolves: RHEL-62197 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.5 - Resolves: RHEL-139901 - Initial commit on c9s - Resolves: RHEL-62197 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.5 - Resolves: RHEL-139901 - Initial commit on c9s - Resolves: RHEL-62197 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.5 - Resolves: RHEL-139901 - Initial commit on c9s - Resolves: RHEL-62197 - Rebuild because of bad test configuration - Resolves: RHEL-62197 - Rebase to 1.7.2 - Resolves: RHEL-80309 - Rebase to 1.7.3 - Resolves: RHEL-94999 - Resolves: RHEL-94998 - Resolves: RHEL-94997 - Rebase to 1.7.5 - Resolves: RHEL-139901 - Backport filter-A and filter-AAAA options (RHEL-105367) - Added installation of tmpfiles config. - Resolves: RHEL-135305 - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Backport filter-A and filter-AAAA options (RHEL-105367) - Added installation of tmpfiles config. - Resolves: RHEL-135305 - Prevent overflow in extract_name function (CVE-2026-2291) - Prevent DoS in DNSSEC validation (CVE-2026-4890) - Prevent out-of-bounds read in DNSSEC validation (CVE-2026-4891) - Prevent out-of-bounds write in DHCPv6 server (CVE-2026-4892) - Prevent source check avoidance by RFC 7871 client-subnet (CVE-2026-4893) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not print an error when uninstalling and no other catalogs are present (#1357273) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix gtk-doc multilib failures - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Drop netstandard-targeting-pack-2.1 - Resolves: RHEL-111815 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to RC 1 - Resolves: RHEL-114572 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Disable bootstrap - Resolves: RHEL-114572 - Update to .NET SDK 10.0.100-rc.2.25502.107 and Runtime 10.0.0-rc.2.25502.107 - Resolves: RHEL-121559 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Update to .NET SDK 10.0.100 and Runtime 10.0.0 - Resolves: RHEL-125748 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.101 and Runtime 10.0.1 - Resolves: RHEL-130938 - Update to .NET SDK 10.0.102 and Runtime 10.0.2 - Resolves: RHEL-138640 - Update to .NET SDK 10.0.103 and Runtime 10.0.3 - Resolves: RHEL-144974 - Update to .NET SDK 10.0.104 and Runtime 10.0.4 - Resolves: RHEL-152953 - Update to .NET SDK 10.0.106 and Runtime 10.0.6 - Resolves: RHEL-163386 - Update to .NET SDK 10.0.108 and Runtime 10.0.8 - Resolves: RHEL-173910 - Update to .NET SDK 10.0.109 and Runtime 10.0.9 - Resolves: RHEL-181558 - Reduce time to detect hanging builds - Resolves: RHEL-191641 - Update to .NET SDK 10.0.110 and Runtime 10.0.10 - Resolves: RHEL-192462 - Update to .NET SDK 10.0.111 and Runtime 10.0.11 - Resolves: RHEL-235481 - Update to .NET SDK 6.0.125 and Runtime 6.0.25 - Resolves: RHEL-15349 - Update to .NET SDK 6.0.126 and Runtime 6.0.26 - Resolves: RHEL-19801 - Update to .NET SDK 6.0.127 and Runtime 6.0.27 - Resolves: RHEL-23785 - Update to .NET SDK 6.0.128 and Runtime 6.0.28 - Resolves: RHEL-27541 - Update to .NET SDK 6.0.129 and Runtime 6.0.29 - Resolves: RHEL-31198 - Update to .NET SDK 6.0.130 and Runtime 6.0.30 - Resolves: RHEL-35308 - Update to .NET SDK 6.0.132 and Runtime 6.0.32 - Resolves: RHEL-45320 - Update to .NET SDK 6.0.133 and Runtime 6.0.33 - Resolves: RHEL-52385 - Update to .NET SDK 6.0.135 and Runtime 6.0.35 - Resolves: RHEL-60799 - Update to .NET SDK 6.0.136 and Runtime 6.0.36 - Resolves: RHEL-65365 - Update to .NET SDK 7.0.110 and Runtime 7.0.10 - Resolves: RHBZ#2228571 - Update to .NET SDK 7.0.111 and Runtime 7.0.11 - Resolves: RHEL-2000 - Update to .NET SDK 7.0.112 and Runtime 7.0.12 - Resolves: RHEL-11698 - Update to .NET SDK 7.0.113 and Runtime 7.0.13 - Resolves: RHEL-14467 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 - Resolves: RHEL-15351 - Update to .NET SDK 7.0.115 and Runtime 7.0.15 - Resolves: RHEL-19802 - Update to .NET SDK 7.0.116 and Runtime 7.0.16 - Resolves: RHEL-23790 - Update to .NET SDK 7.0.117 and Runtime 7.0.17 - Resolves: RHEL-27545 - Update to .NET SDK 7.0.118 and Runtime 7.0.18 - Resolves: RHEL-31203 - Update to .NET SDK 7.0.119 and Runtime 7.0.19 - Resolves: RHEL-35314 - Update to .NET SDK 8.0.117 and Runtime 8.0.17 - Resolves: RHEL-94417 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.118 and Runtime 8.0.18 - Resolves: RHEL-100592 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.119 and Runtime 8.0.19 - Resolves: RHEL-106723 - Update to .NET SDK 8.0.120 and Runtime 8.0.20 - Resolves: RHEL-112260 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Update to .NET SDK 8.0.121 and Runtime 8.0.21 - Resolves: RHEL-116867 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.122 and Runtime 8.0.22 - Resolves: RHEL-125738 - Update to .NET SDK 8.0.123 and Runtime 8.0.23 - Resolves: RHEL-138652 - Update to .NET SDK 8.0.124 and Runtime 8.0.24 - Resolves: RHEL-144966 - Update to .NET SDK 8.0.125 and Runtime 8.0.25 - Resolves: RHEL-152932 - Update to .NET SDK 8.0.126 and Runtime 8.0.26 - Resolves: RHEL-163418 - Update to .NET SDK 8.0.127 and Runtime 8.0.27 - Resolves: RHEL-173923 - Update to .NET SDK 8.0.128 and Runtime 8.0.28 - Resolves: RHEL-181055 - Reduce time to detect hanging builds - Resolves: RHEL-191652 - Update to .NET SDK 8.0.129 and Runtime 8.0.29 - Resolves: RHEL-192467 - Update to .NET SDK 8.0.130 and Runtime 8.0.30 - Resolves: RHEL-235471 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to 3.1.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - fix CVE-2026-42006: IMAP parser list_count_limit bypass via open parentheses (RHEL-188468) - fix crash when user has sieve script that includes two missing scripts (RHEL-37160) - rebuild with updated tests - fix CVE-2024-23184: using a large number of address headers may trigger a denial of service (RHEL-55212) - fix CVE-2024-23185: very large headers can cause resource exhaustion when parsing message (RHEL-55224) - fix sysusers config file name (RHEL-77322) - add /var/lib/dovecot to tmpfiles for image mode (RHEL-139098) - fix building with latest openssl (RHEL-140619) - fix CVE-2026-27858: denial of service via crafted message before authentication (RHEL-161640) - fix CVE-2025-59032: ManageSieve: Denial of Service via crafted SASL initial response in AUTHENTICATE command (RHEL-162288) - fix CVE-2026-27857: denial of service via specially crafted NOOP command (RHEL-161679) - rebuild - feat(systemd): install systemd-executor - test: use -device instead of -watchdog to remove qemu - fix(fips): remove /dev/{random,urandom} pre-creation - fix(systemd): always include sg module - fix(fips): do not blindly remove /boot - fix(github): update format of labeler - fix(network-manager): add "After" dependency on dbus.service - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - feat(systemd-pcrphase): introducing the systemd-pcrphase - fix(systemd-pcrphase): only include - fix(nfs): include also entries from /usr/lib/{passwd,group} - fix(systemd): set right permissions for the machine-id file - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/ - feat(dracut-init.sh): give --force-add precedence over --omit - fix(35network-manager): install nftables kernel modules - fix(35network-manager): install nft binary during module - fix(dracut-install): copy xattr when use clone ioctl - feat(dracut.sh): add --add-confdir option - fix: typo in variable name - feat(fips): add support for UKIs - fix(kernel-modules): use modalias info in get_dev_module() - fix(dracut-functions.sh): convert mmcblk to the real kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(rescue): create hmac file for rescue kernel - fix(dracut.sh): don't pass empty string as dir - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(systemd): partial backport of - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(35network-manager): install nftables kernel modules - fix(35network-manager): install nft binary during module - fix(dracut-install): copy xattr when use clone ioctl - feat(dracut.sh): add --add-confdir option - fix: typo in variable name - feat(fips): add support for UKIs - fix(kernel-modules): use modalias info in get_dev_module() - fix(dracut-functions.sh): convert mmcblk to the real kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(rescue): create hmac file for rescue kernel - fix(dracut.sh): don't pass empty string as dir - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(systemd): partial backport of - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - build: rebuild without an obsoleted patch - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(rescue): create hmac file for rescue kernel - fix(dracut.sh): don't pass empty string as dir - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(systemd): partial backport of - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - build: rebuild without an obsoleted patch - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless - fix(rescue): create hmac file for rescue kernel - fix(dracut.sh): don't pass empty string as dir - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(systemd): partial backport of - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - build: rebuild without an obsoleted patch - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - feat(systemd): install systemd-executor - test: use -device instead of -watchdog to remove qemu - fix(fips): remove /dev/{random,urandom} pre-creation - fix(systemd): always include sg module - fix(fips): do not blindly remove /boot - fix(github): update format of labeler - fix(network-manager): add "After" dependency on dbus.service - fix(url-lib.sh): nfs_already_mounted() with trailing slash in - feat(systemd-pcrphase): introducing the systemd-pcrphase - fix(systemd-pcrphase): only include - fix(nfs): include also entries from /usr/lib/{passwd,group} - fix(systemd): set right permissions for the machine-id file - feat(lsinitrd.sh): look for initrd in /usr/lib/modules/ - feat(dracut-init.sh): give --force-add precedence over --omit - fix(35network-manager): install nftables kernel modules - fix(35network-manager): install nft binary during module - fix(dracut-install): copy xattr when use clone ioctl - feat(dracut.sh): add --add-confdir option - fix: typo in variable name - feat(fips): add support for UKIs - fix(kernel-modules): use modalias info in get_dev_module() - fix(dracut-functions.sh): convert mmcblk to the real kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(rescue): create hmac file for rescue kernel - fix(dracut.sh): don't pass empty string as dir - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(systemd): partial backport of - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(35network-manager): install nftables kernel modules - fix(35network-manager): install nft binary during module - fix(dracut-install): copy xattr when use clone ioctl - feat(dracut.sh): add --add-confdir option - fix: typo in variable name - feat(fips): add support for UKIs - fix(kernel-modules): use modalias info in get_dev_module() - fix(dracut-functions.sh): convert mmcblk to the real kernel - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(rescue): create hmac file for rescue kernel - fix(dracut.sh): don't pass empty string as dir - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(systemd): partial backport of - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - build: rebuild without an obsoleted patch - fix(35network-manager): remove duplicate installkernel - feat(fips): include fips module unconditionally - fix(dracut.sh): make omit-drivers option do exact match for - feat: add openssl module - fix(rescue): create hmac file for rescue kernel - fix(dracut.sh): don't pass empty string as dir - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(systemd): partial backport of - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - build: rebuild without an obsoleted patch - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless - fix(rescue): create hmac file for rescue kernel - fix(dracut.sh): don't pass empty string as dir - fix(systemd): add missing modprobe@.service - fix: let check_vol_slaves_all return 1 when checks on all - improvement(74nvmf): lookup required NIC kernel modules for - fix(74nvmf): set root=nvmf - chore(multipath): remove `rd_NO_MULTIPATH` kernel command - refactor(multipath): remove custom multipathd.service - fix(systemd): systemd.volatile needs overlayfs kernel module - refactor(dracut): introduce clamp_mtimes helper function - fix(dracut): ensure hardlink deduplication is reproducible - fix(systemd): partial backport of - fix(systemd-repart): allow partition format - feat(install.d):according to the changes of - feat(i18n): pull 'drm' or 'simpledrm' module unless excluded - fix(pcsc): add opensc load module file - fix(pcsc): add --disable-polkit to pcscd.service - fix(pkcs11): delete trailing dot on - fix(multipath): disable user_friendly_names with mpathconf Resolves: RHEL-103385,RHEL-103974,RHEL-109631,RHEL-145135,RHEL-91322 - fix(network-legacy): replace `echo` writes with `printf` to - fix(iscsi): replace `echo` writes with `printf` to prevent - fix(base): replace eval with safe variable indirection in Resolves: RHEL-170857 - fix(network): warn on suspicious shell metacharacters in - fix(base): escape arguments in initqueue hook script Related: RHEL-170857 - build: rebuild without an obsoleted patch - revert: "feat(i18n): pull 'drm' or 'simpledrm' module unless - fix(base): escape die() message in emergency hook script - fix(base): replace eval with safe variable indirection in - Remove brew-build.tier0.functional test - Enable brew-build.tier0.functional test - Rebase to upstream v0.0.29 Resolves: RHEL-61658 - Rebase to upstream v0.0.31 Resolves: RHEL-86264 - Rebuild for libkdumpfile 0.5.5 Resolves: RHEL-86262 - Add man page for drgn Resolves: RHEL-100318 - Fix regression in selftest introduced in 0.0.31-3 - Rebase to upstream v0.0.33 Resolves: RHEL-114118 - Work around ORC backports in RHEL 9.6 Resolves: RHEL-136527 - Updated to 0.115 (RHEL-11393) - Use __cc macro instead of hard-coding gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upstream patch to fix gcc-10 build - Update to 1.6.0 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Gating rebuild [bz#1974188] - Resolves: bz#1974188 (Define tests, including gating tests, for dtc) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-30780 - New release: v1.26 - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too. - Print number of holes, bit holes and bit paddings in class member types. - Introduce --contains_enumerator=ENUMERATOR_NAME: - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum". - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF. - Fix loading DW_TAG_subroutine_type generated by the Go compiler. - Fix loading of 32-bit signed enums from BTF. - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding. - Parallelize loading BTF and DWARF, speeding up a bit btfdiff. - Do type expansion to cover "private" types and enumerations in btfdiff. - New release: v1.27 - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result. - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file. - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it. - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output. - Fix hole discovery with inheritance in C++. - Backport upstream bugfixes for clang builds Resolves: RHEL-54022 - New release: 1.30 - Better detection of abort during DWARF loader thread processing - pahole now detects presence of libbpf APIs and BTF features using weak function declarations when built using a shared library libbpf - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature - New release: 1.29 - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads. - The BTF encoding now is always reproducible, and as fast/faster than before. - The memory consumption is reduced. - Support for multiple BTF_DECL_TAGs pointing to same tag. - Verify that pfunct prints btf_decl_tags read from BTF. - Don't print functions twice when using 'pfunct -f function_name'. - New release: 1.28 - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding. - Show flexible arrays statistics - Add '--padding N' and '--padding_ge N' to show structs with paddings - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel. - Don't stop pfunct output at the first function that matches a filter, show all of them - Allow encoding data about all global variables, not just per CPU ones - Handle .BTF_ids section endianness, fully supporting cross builds - Generate decl tags for bpf_fastcall for eligible kfuncs - Add "distilled_base" BTF feature to split BTF generation. - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var - Serialize access to elfutils dwarf_getlocation(). - Honour --lang_exclude when merging LTO built CUs. - Add the debuginfod client cache directory to the vmlinux search path. - Print the CU's language when a tag isn't supported. - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags. - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value - Introduce a tests/ directory with regression tests - Rework the selection of functions to represent in BTF, for instance: - Skip functions that passes values thru the stack when those structs don't have expected alignment due to some attribute usage that then causes problems with BTF trampolines due to lack of expressiveness in BTF to signal such special cases. - Skip objects (compile units) without DWARF: don't stop a multi object encoding session just because one doesn't have any DWARF in it. - Fix BTF dedup by updating libbpf. - Fix the inference of the explicit alignment attribute of zero length arrays, like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no explicit alignment attribute encoding. - Fix the inference of alignments after bitfields, such as in struct nft_rule_dp->data[] after ->handle:42, also in the Linux kernel. - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct. - Add comparision of functions encoded in BTF between baseline 'master' branch and current branch, i.e. 'next'. - Update to dwz 0.16 - Require xxhash-devel to build - Change the xattr entry hash to use an unsighed char by default - Related: RHEL-10467 - rebuild to incorporate libss-devel package - Related: RHEL-19059 - Bump release to perform build verification for gating changes - Related: RHEL-71250 - Fix: e2fsprogs: online resize fails - Related: RHEL-76095 - ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes - Update to 4.20 - Add gating.yaml - Add tmt gating plan - Drop unnecessary javax16.api.jar - Add dependency on javapackages-tools since the ecj binary requires it to run - Bump release so that the NVR on RHEL-9 is higher than RHEL-8 - Resolves: RHEL-14880 ecj requires specific java version - Resolves: RHEL-18432 OpenJDK 21 support for RHEL ecj - Picked 9b9b4c7dde2e and 32cfff131279 from rhel 9.0 to update nvr - Resolves: #RHEL-50842 - Bump release - Related: #RHEL-50842 - Bump release - Related: #RHELMISC-9574 - Rebuilt for new freeglut. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with upstream to drop the glew dependency - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL-26187 - Update to 1.1.13.1 Resolves: https://issues.redhat.com/browse/RHEL-68048 - Bump release - Update to 1.1.13.1 Resolves: https://issues.redhat.com/browse/RHEL-68048 - Bump release - Don't install 15_nvidia_gbm.json - Add elfutils-0.192-fix-free.patch - Upgrade to upstream elfutils 0.193 - Drop upstreamed patches elfutils-0.192-fix-free.patch elfutils-0.192-libelf-static.patch elfutils-0.192-stacktrace-lto.patch - Upgrade to upstream elfutils 0.194 - Add elfutils-0.194-alloc-jobs.patch - Disable debuginfod-urls - Add elfutils-0.192-fix-free.patch - Upgrade to upstream elfutils 0.193 - Drop upstreamed patches elfutils-0.192-fix-free.patch elfutils-0.192-libelf-static.patch elfutils-0.192-stacktrace-lto.patch - Upgrade to upstream elfutils 0.194 - Add elfutils-0.194-alloc-jobs.patch - Disable debuginfod-urls - Add elfutils-0.192-fix-free.patch - Upgrade to upstream elfutils 0.193 - Drop upstreamed patches elfutils-0.192-fix-free.patch elfutils-0.192-libelf-static.patch elfutils-0.192-stacktrace-lto.patch - Upgrade to upstream elfutils 0.194 - Add elfutils-0.194-alloc-jobs.patch - Disable debuginfod-urls - Add elfutils-0.192-fix-free.patch - Upgrade to upstream elfutils 0.193 - Drop upstreamed patches elfutils-0.192-fix-free.patch elfutils-0.192-libelf-static.patch elfutils-0.192-stacktrace-lto.patch - Upgrade to upstream elfutils 0.194 - Add elfutils-0.194-alloc-jobs.patch - Disable debuginfod-urls - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix man.el shell injection vulnerability (RHEL-79025) - Eliminate use of obsolete patch syntax (RHEL-80443) - Bump release - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix build failure on CentOS Stream. Related: rhbz#1951306 - Revert patch for FSF addresses (it became obsolete with 12.2) - Remove Obsoletes and Provides tetex-preview - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix man.el shell injection vulnerability (RHEL-79025) - Eliminate use of obsolete patch syntax (RHEL-80443) - Bump release - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix man.el shell injection vulnerability (RHEL-79025) - Eliminate use of obsolete patch syntax (RHEL-80443) - Bump release - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix man.el shell injection vulnerability (RHEL-79025) - Eliminate use of obsolete patch syntax (RHEL-80443) - Bump release - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Disable xwidgets (RHEL-14551) - org-file-contents: Consider all remote files unsafe (CVE-2024-30205) - Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203) - Add protection for LaTeX preview (CVE-2024-30204) - org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331) - Fix man.el shell injection vulnerability (RHEL-79025) - Eliminate use of obsolete patch syntax (RHEL-80443) - Bump release - Fix arbitrary code execution via Lisp macro expansion (RHEL-69399) - Fix arbitrary code execution via Lisp macro expansion (RHEL-90181) - Restore definition of variable "enable-dir-local-variables" (RHEL-92550) - Pong and Tetris are excluded (RHEL-94297) - Fix flymake tests with GCC 14 (RHEL-94297) - Fix nsm-should-check for "google.com" failure (RHEL-94297) - Fix package tests for tetris no longer existing as a package (RHEL-94297) - Introduce untrusted-content variable (RHEL-94297) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1961175 (Missing man page for enchant-lsmod) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.2.11 - Update to 2.2.12 - Update to 2.2.13 - Update to 2.2.14 - Update to 2.2.15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Include support for Nuspell. - Disable nuspell support for RHEL (#1925839) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - - Force C++14 as this code is not C++17 ready - Fix sprintf format issue - Fix ordered comparison of a pointer against zero issue - - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - - Don't enable GConf2 on RHEL 9 as it won't be available there. - - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags - Resolves: rhbs #2007544,2000928,2000929 - Bugzilla Bug 2007544 - The esc provides outdated configuration for opensc - Bugzilla Bug 2000928 - ESC does not detect smart cards and crashes upon launch [rhel-9.0.0] - Bugzilla Bug 2000929 - [RHEL-9][AppStream] esc present in comps but missing from repository [rhel-9.0.0] Resolves: rhbs #2007544,2000928,2000929 - Appease rpminspect Resolves: rhbs #2050849 - Bug 2050849 - Volkswagen Siemens CardOS M4.4 and 5.0 cards display incorrect status in ESC [RHEL 9.1] - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for rhbz#2190221 - Resolves: rhbz#2190221 - Fix gating.yaml - Related: rhbz#2190221 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Allow launch action to open PDFs - Resolves: RHEL-84038 - Fix a leak - Resolves: RHEL-84038 - Sanitize arguments (CVE-2026-46529) - Resolves: RHEL-184047 - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Resolves: RHEL-12405 (Move WebKitGTK parts in Evolution Data Server into optional subpackage) - Add requirement on ui subpackage into ui-devel subpackage - Resolves: RHEL-21361 (OAuth2: Enable HTML5 database and local storage features for web view) - Resolves: RHEL-72799 (EBackend: Change when adding signal handler for "network-changed") - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server) - Resolves: RHEL-25069 (Release queue lock as soon as possible in ews_next_request()) - Resolves: RHEL-19371 (Backport upstream patch to workaround broken text/calendar mail attachments by the server) - Resolves: RHEL-25069 (Release queue lock as soon as possible in ews_next_request()) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Related: RHEL-33645 (Rebuild against samba 4.20) - Related: RHEL-59788 (Rebuild against samba 4.21) - Related: RHEL-89873 (Rebuild against samba 4.22) - Related: RHEL-114548 (Rebuild against samba 4.23) - Related: RHEL-33645 (Rebuild against samba 4.20) - Related: RHEL-59788 (Rebuild against samba 4.21) - Related: RHEL-89873 (Rebuild against samba 4.22) - Related: RHEL-114548 (Rebuild against samba 4.23) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice) - Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Apply changes from RHEL 8 (#1811941, #1831158, #1951480) Resolves: rhbz#2051621 - Backport upstream PR 120 to fix segfault on invalid unit types Resolves: rhbz#2224578 - Add vendor ID for NVIDIA BMCs Resolves: rhbz#2218358 - Update /var/run to /run in ipmievd.service that systemd warns about Resolves: rhbz#2100475 - Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Force C++14 as this code is not C++17 ready - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to (unreleased) version 2.6.0 to resolve licensing issues Resolves #1989405 - Add modified upstream test suite as a gating test Related #1989405 - Bump version for rebuild (binutils) Resolves: bz#1964183 Resolves: bz#1964189 - 0.27.4 Resolves: bz#1989848 - Do not duplicate changelog file Resolves: bz#1989848 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure Resolves: bz#1993247 - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header Resolves: bz#1993284 - Fix test for CVE-2021-29470 Resolves: bz#1993284 - Include missing tests for CVEs Resolves: bz#1993247 Resolves: bz#1993284 - Properly install POC files Resolves: bz#1993247 Resolves: bz#1993284 - Exiv2 0.27.5 Resolves: bz#2018421 Fix stack exhaustion issue in the printIFDStructure function leading to DoS Resolves: bz#2003670 - Remove RPATH Resolves: bz#2018421 - Bump version for rebuild (binutils) Resolves: bz#1964183 Resolves: bz#1964189 - 0.27.4 Resolves: bz#1989848 - Do not duplicate changelog file Resolves: bz#1989848 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix out-of-bounds read in Exiv2::Jp2Image::printStructure Resolves: bz#1993247 - Fix out-of-bounds read in Exiv2::Jp2Image::encodeJp2Header Resolves: bz#1993284 - Fix test for CVE-2021-29470 Resolves: bz#1993284 - Include missing tests for CVEs Resolves: bz#1993247 Resolves: bz#1993284 - Properly install POC files Resolves: bz#1993247 Resolves: bz#1993284 - Exiv2 0.27.5 Resolves: bz#2018421 Fix stack exhaustion issue in the printIFDStructure function leading to DoS Resolves: bz#2003670 - Remove RPATH Resolves: bz#2018421 - Fix parsing of large tokens - Reject direct parameter entity recursion - Resolves: RHEL-29699 - Resolves: RHEL-29696 - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492 - Resolves: RHEL-56761 - Resolves: RHEL-57520 - Resolves: RHEL-57511 - Fix CVE-2024-50602 - Resolves: RHEL-65066 - Fix CVE-2024-8176 - Resolves: RHEL-57489 - Fix CVE-2025-59375 - Resolves: RHEL-114643 - Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492 - Resolves: RHEL-56761 - Resolves: RHEL-57520 - Resolves: RHEL-57511 - Fix CVE-2024-50602 - Resolves: RHEL-65066 - Fix CVE-2024-8176 - Resolves: RHEL-57489 - Fix CVE-2025-59375 - Resolves: RHEL-114643 - Fix CVE-2026-45186 - Resolves: RHEL-177988 - Rebuilt for -devel add to CRB Resolves: RHEL-18979 - Update to upstream release 1.22.0 - Resolves: RHEL-67059 - Update to upstream release 2.1.0 - Resolves: RHEL-104032 - Update to upstream release 2.3.1 - Resolves: RHEL-134211 - bump release to rebuild in sidetag - Resolves: RHEL-134211 - Rebuilt after updating libfabric - Resolves: RHEL-134211 - Add /var/lib/fapolicyd to tmpfiles Resolves: RHEL-104873 - fapolicyd-1.3.7 and fapolicyd-selinux-0.9 - fapolicyd-1.4 and fapolicyd-selinux-1.0 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4 - Fix deadlock on reconfigure - On reconfigure, update the trust list and reload the rpm filter - fapolicyd-1.4.2 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.2 - fapolicyd-1.4.3 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3 https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1 - Fix binary path of rpm-loader - Map file with MAP_SHARED instead of MAP_PRIVATE - Fix segfault when interrupting fapolicyd startup - Fix 32-bit ELF dynamic section parsing - fapolicyd-1.4.4 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.4 - fapolicyd-1.4.5 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.5 - Add /var/lib/fapolicyd to tmpfiles Resolves: RHEL-104873 - fapolicyd-1.3.7 and fapolicyd-selinux-0.9 - fapolicyd-1.4 and fapolicyd-selinux-1.0 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4 - Fix deadlock on reconfigure - On reconfigure, update the trust list and reload the rpm filter - fapolicyd-1.4.2 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.2 - fapolicyd-1.4.3 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.3 https://github.com/linux-application-whitelisting/fapolicyd-selinux/releases/tag/v1.1 - Fix binary path of rpm-loader - Map file with MAP_SHARED instead of MAP_PRIVATE - Fix segfault when interrupting fapolicyd startup - Fix 32-bit ELF dynamic section parsing - fapolicyd-1.4.4 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.4 - fapolicyd-1.4.5 https://github.com/linux-application-whitelisting/fapolicyd/releases/tag/v1.4.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - fence_ibm_vpc: add apikey file support Resolves: RHEL-107505 - fence_aws: add "skip_os_shutdown" parameter to allow hard poweroff Resolves: RHEL-7601 - fence_ibm_powervs: update description of api-type parameter to show correct default value Resolves: RHEL-114753 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - fence_gce: fix node list limit Resolves: RHEL-128926 - bundled urllib3: fix CVE-2025-66418 Resolves: RHEL-136069 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - bundled urllib3: fix CVE-2025-66471 - bundled urllib3: fix CVE-2026-21441 Resolves: RHEL-139799, RHEL-140796 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-23490 Resolves: RHEL-142460 - fence_ibm_vpc: fix missing statuses Resolves: RHEL-145088 - bundled urllib3: fix issue with CVE-2026-21441 patch Resolves: RHEL-146282 - bundled urllib3: fix CVE-2024-37891, CVE-2025-66418, CVE-2025-66471, CVE-2026-21441, and pyasn1 CVE-2026-23490 on all archs Resolves: RHEL-146344 - bundled cryptography: replace with dependency to fix CVE-2026-26007 - bundled PyJWT: upgrade to v2.12.1 to fix CVE-2026-32597 Resolves: RHEL-167241, RHEL-155676 - bundled pyasn1: fix CVE-2026-30922 Resolves: RHEL-157202 - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182313 - fence_openstack: fix list-action to avoid timeout when there are 100+ VMs on the hypervisor Resolves: RHEL-186320 - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939 Resolves: RHEL-193808 - bundled pyasn1: fix CVE-2026-59886 Resolves: RHEL-217934 - Use systemd sysusers config to create user and group Resolves: RHEL-78736 - Use systemd sysusers config to create user and group Resolves: RHEL-78736 - Use systemd sysusers config to create user and group Resolves: RHEL-78736 - Update to fetchmail-6.4.14 - Revert change that added sgid bit to fetchmail Resolves: #1906353 - Update to fetchmail-6.4.15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to fetchmail-6.4.16 - Update to fetchmail-6.4.18 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to fetchmail-6.4.24 (fixes CVE-2021-36386 and CVE-2021-39272) Resolves: #2005307, #1999276 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Upgrade to 1.13 Resolves: rhbz#2122193 - rebuilt - New upstream version - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating CI yaml file - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - New upstream version - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating CI yaml file - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - New upstream version - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating CI yaml file - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - New upstream version - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating CI yaml file - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - New upstream version - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating CI yaml file - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - New upstream version - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating CI yaml file - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - New upstream version - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix crash on --enghelp option - Fix FTBFS with new kernel headers (bz#1984823) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating CI yaml file - Use LDFLAGS when linking dynamic engines Related: rhbz#2044858 - Fix fio failure with --verify=crc32c on arm Related: rhbz#1974189 - Rebase to new upstream release - Do NOT drop support for pmemblk https://github.com/axboe/fio/commit/04c1cdc - Add signature check - Related: rhbz#2188805 - Update to 140.4.0 ESR - Update to 140.5.0 ESR - Update to 140.6.0 ESR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.4.0 ESR - Update to 140.5.0 ESR - Update to 140.6.0 ESR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.10.2 ESR - Update to 140.6.0 ESR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.10.2 ESR - Update to 140.11.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.10.2 ESR - Update to 140.11.0 ESR - Update to 140.12.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.10.2 ESR - Update to 140.11.0 ESR - Update to 140.12.0 ESR - Update to 140.13.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.4.0 ESR - Update to 140.5.0 ESR - Update to 140.6.0 ESR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.4.0 ESR - Update to 140.5.0 ESR - Update to 140.6.0 ESR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.10.2 ESR - Update to 140.6.0 ESR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.10.2 ESR - Update to 140.11.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.10.2 ESR - Update to 140.11.0 ESR - Update to 140.12.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.10.2 ESR - Update to 140.11.0 ESR - Update to 140.12.0 ESR - Update to 140.13.0 ESR - Add gcc-toolset-14-gcc-c++ to BR - Fix the check for minor version when disabling wasi-sdk - feat(service): (x)rootd file server - test(functions): fix iptables normalization for opt field - test: add scale keyword to scale tests - fix(systemd): verify firewalld is responsive to dbus - fix(fw): start: remove ipset probe - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(policy): rich: verify ipset exists - feat: add iperf{2,3} services - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - fix(policy): allow-host-ipv6: allow MLD packets - test(functions): fix iptables normalization for opt field - test: add scale keyword to scale tests - fix(systemd): verify firewalld is responsive to dbus - fix(fw): start: remove ipset probe - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(policy): rich: verify ipset exists - feat: add iperf{2,3} services - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - fix(policy): allow-host-ipv6: allow MLD packets - fix(zone): forward: support timeout - fix(policy): support timeouts - feat(service): (x)rootd file server - test(functions): fix iptables normalization for opt field - test: add scale keyword to scale tests - fix(systemd): verify firewalld is responsive to dbus - fix(fw): start: remove ipset probe - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(policy): rich: verify ipset exists - feat: add iperf{2,3} services - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - fix(policy): allow-host-ipv6: allow MLD packets - test(functions): fix iptables normalization for opt field - test: add scale keyword to scale tests - fix(systemd): verify firewalld is responsive to dbus - fix(fw): start: remove ipset probe - fix(systemd): allow start code 251 (RUNNING_BUT_FAILED) - fix(policy): rich: verify ipset exists - feat: add iperf{2,3} services - fix(server): load firewall rules before claiming dbus - fix(nftables): ipset: add entries from GLib loop when idle - fix(systemd): Requires dbus - fix(policy): allow-host-ipv6: allow MLD packets - fix(zone): forward: support timeout - fix(policy): support timeouts - handle end-of-stream when encoding with verification (CVE-2021-0561) - don't free memory that is still used after realloc() error (CVE-2020-22219) - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 - Fix previous changelog entry - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Deprecate MD5 and SHA1 hashes Resolves: #1935509 - Rebase to 1.2.2 Resolves: #1999742 - Update to 1.2.3 Resolves: RHEL-16036 - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 - Fix previous changelog entry - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 - Fix previous changelog entry - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Backport upstream patches for CVE-2024-42472 - Require bubblewrap version that has new --bind-fd option backported for addressing CVE-2024-42472 - Fix previous changelog entry - Use sysusers_create_compat macro to create user & group Resolves: RHEL-82605 - Fix arbitrary code execution via crafted symlinks in sandbox-expose options Resolves: RHEL-165643 - Fix arbitrary file deletion on host via improper cache file path validation Resolves: RHEL-170171 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.0.4 - Add explicit conflicts with xdg-utils - Add flatpak- prefix to executables to avoid conflicting with xdg-utils - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.0.5 - Enable installed tests Resolves: #2062206 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.0.4 - Add explicit conflicts with xdg-utils - Add flatpak- prefix to executables to avoid conflicting with xdg-utils - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.0.5 - Enable installed tests Resolves: #2062206 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Re-work flex subpackages and provide shared libraries (#1327851): - Remove and obsolete the flex-devel subpackage containing static libraries - Provide shared libraries in a new subpackage named libfl2 - Provide development files in a new subpackage named libfl-devel - Provide static libraries in a new subpackage named libfl-static - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Re-work flex subpackages and provide shared libraries (#1327851): - Remove and obsolete the flex-devel subpackage containing static libraries - Provide shared libraries in a new subpackage named libfl2 - Provide development files in a new subpackage named libfl-devel - Provide static libraries in a new subpackage named libfl-static - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - backport the following fixes from Fedora: - fix header conflicts in multilib installs (RHEL-134741) - fix rpmlint warnings - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Link with -Wl,-z,now. Related: rhbz#2044860 - Remove BuildRequires xprop entirely. If present, the configure script will call it looking for a property on the root window that Fedora's X server does not set, and which would not work anyway since there is no X server running in the buildroot, so we can just remove the dependency. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1.3.6 Resolves: bz#1976712 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1.3.8 Resolves: bz#2025415 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 5.13.1 - Provide the right font configuration - Drop ttf format since upstream affirms that otf is to be preferred - Rollback to FA4 - Add epoch to inter-subpackages requirement - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix postun scriptlet to remove the entry from xml catalog. - New upstream release. - Fix the score calculation on matching for multiple values. - Enable 11-lcdfilter-default.conf. Resolves: rhbz#1965684 - Rebase to the latest release. Resolves: rhbz#2023161 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - New upstream release. - Update deps to font(notosans) https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts - New upstream release. - Fix missing a file in the archive. Resolves: rhbz#2050478 - New upstream release. - Rebase to 2.14 and revert Noto Default change happened in f36. Resolves: rhbz#2075393 - Fix the wrong behavior on remap-dir in config. Resolves: rhbz#2150227 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix postun scriptlet to remove the entry from xml catalog. - New upstream release. - Fix the score calculation on matching for multiple values. - Enable 11-lcdfilter-default.conf. Resolves: rhbz#1965684 - Rebase to the latest release. Resolves: rhbz#2023161 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - New upstream release. - Update deps to font(notosans) https://fedoraproject.org/wiki/Changes/DefaultToNotoFonts - New upstream release. - Fix missing a file in the archive. Resolves: rhbz#2050478 - New upstream release. - Rebase to 2.14 and revert Noto Default change happened in f36. Resolves: rhbz#2075393 - Fix the wrong behavior on remap-dir in config. Resolves: rhbz#2150227 - 2.0.4-2 ✅ validate fontconfig files by default - 2.0.5-1 ✅ do not add empty urls to appstream files - 3.0.1-1 🐞 Workaround Fedora problems created by rpm commit 93604e2 - 3.0.3-1 🐞 Fix bugs in the 3.0.2 refactoring - 3.0.2-1 🐞 Workaround Fedora problems created by rpm commit 93604e2 harder - Revert to 2.0.5 - Insert Epoch in Requires/Provides/Obsoletes - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - recognize fractial numbers in PageSize (backport from upstream) - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - rebuilt with new foomatic-db, use make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebuilt with new foomatic-db - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Updated to foomatic-db-4.0-20200526 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - updated to foomatic-db-4.0-20201104 - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to foomatic-db-4.0-20210209 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Updated to foomatic-db-4.0-20200526 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - updated to foomatic-db-4.0-20201104 - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to foomatic-db-4.0-20210209 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Updated to foomatic-db-4.0-20200526 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - updated to foomatic-db-4.0-20201104 - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to foomatic-db-4.0-20210209 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2024-24258 and CVE-2024-24259 Resolves: https://issues.redhat.com/browse/RHEL-25176 Resolves: https://issues.redhat.com/browse/RHEL-25178 - Fix CVE-2024-24258 and CVE-2024-24259 Resolves: https://issues.redhat.com/browse/RHEL-25176 Resolves: https://issues.redhat.com/browse/RHEL-25178 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.18, fixes CVE-2026-50031 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.17, fixes CVE-2026-33554 - Update to 1.6.18, fixes CVE-2026-50031 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Fix for CVE-2025-27363 out-of-bound write vulnerability - Patch initially by Marc Deslauriers of Canonical - https://www.openwall.com/lists/oss-security/2025/03/14/3 - Adjusted for EL9 by Jonathan Wright of AlmaLinux - and a member of the Meta security team - Resolves: RHEL-83105 - Fix for CVE-2025-27363 out-of-bound write vulnerability - Patch initially by Marc Deslauriers of Canonical - https://www.openwall.com/lists/oss-security/2025/03/14/3 - Adjusted for EL9 by Jonathan Wright of AlmaLinux - and a member of the Meta security team - Resolves: RHEL-83105 - New upstream release. Resolves: rhbz#1853939 - Update the patch to drop bundled gnulib. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310 Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063 - New upstream release. Resolves: rhbz#1853939 - Update the patch to drop bundled gnulib. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Security fixes for CVE-2022-25308, CVE-2022-25309, CVE-2022-25310 Resolves: rhbz#2050086, rhbz#2050069, rhbz#2050063 - Resolves: RHEL-14822 - mishandled malformed data leading to a crash - Resolves: RHEL-14825 - crafted BGP UPDATE message leading to a crash - Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-174677 - denial of service via crafted FlowSpec component - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-174677 - denial of service via crafted FlowSpec component - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface - Resolves: RHEL-176258 - AVC when reading user's site-packages - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing - Resolves: RHEL-14822 - mishandled malformed data leading to a crash - Resolves: RHEL-14825 - crafted BGP UPDATE message leading to a crash - Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-78318 - BFD status down in FRR does not bring down BGP session between peers - Resolves: RHEL-78354 - BGP with BFD has a dropped Connection before peering established - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-174677 - denial of service via crafted FlowSpec component - Resolves: RHEL-68432 - FRR gives false warning when Graceful Restart enabled - Resolves: RHEL-85950 - FRR doesn't send logs to stdout when running as a daemon - Resolves: RHEL-87730 - frr-k8s CI started failing using latest rpm, failures around BFD sessions - Resolves: RHEL-87731 - FRR bgp session not recovered due to incorect error no AF activated for peer - Resolves: RHEL-13756 - Source address set in FRR route-map not working with IPv6 - Resolves: RHEL-64427 - FRR ignores kernel routes from the system - Resolves: RHEL-137180 - Files under /var are not properly created in image-mode - Resolves: RHEL-174677 - denial of service via crafted FlowSpec component - Resolves: RHEL-152300 - ignored route in the kernel after flapping interface - Resolves: RHEL-176258 - AVC when reading user's site-packages - Resolves: RHEL-193234 - input validation fixes for EVPN NLRI and ENCAP/VNC packet parsing - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Enabling gating and testing, adding rpminspect.yaml - Resolves: RHEL-147189 - AVC failures when running frr10 - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Enabling gating and testing, adding rpminspect.yaml - Resolves: RHEL-147189 - AVC failures when running frr10 - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC - Resolves: RHEL-193232 - Resolves: RHEL-222338 - AVC when reading user's site-packages - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Enabling gating and testing, adding rpminspect.yaml - Resolves: RHEL-147189 - AVC failures when running frr10 - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Enabling gating and testing, adding rpminspect.yaml - Resolves: RHEL-147189 - AVC failures when running frr10 - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Enabling gating and testing, adding rpminspect.yaml - Resolves: RHEL-147189 - AVC failures when running frr10 - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Fix CVE-2026-37460: improve packet parsing for EVPN and ENCAP/VNC - Resolves: RHEL-193232 - Resolves: RHEL-222338 - AVC when reading user's site-packages - Initial commit on c9s - Resolves: RHEL-125957 - Adding FRR10 as a versioned package - Enabling gating and testing, adding rpminspect.yaml - Resolves: RHEL-147189 - AVC failures when running frr10 - Resolves: RHEL-158428 - fix Requires for libyang to pull in rebased version - Resolves: RHEL-155911 - Files under /var are not properly created in image-mode - Resolves: RHEL-157859 - Bump FRR to 10.4.3 to fix EVPN problems - Resolves: RHEL-174678 - denial of service via crafted FlowSpec component - Resolves: RHEL-174696 - denial of service via crafted BGP UPDATE message - Update to 0.6.1 (#1946415) - Apply coverity fixes also to bundled libmy - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make_build macro and remove hard-coded gcc - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1949120 - ftp put failed with 'ftp: Out of memory' when stacksize set to unlimited - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.14 - Related: RHEL-27608 - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.15 - Related: RHEL-80816 - update to https://github.com/containers/fuse-overlayfs/releases/tag/v1.16 - fixes "Update fuse-overlayfs to 1.16 [rhel-9.7.z]" - Resolves: RHEL-128520 - Fix feature_notify_inode_expire_only related(rhbz#2188182) - Synchronize expire-only API with upstream. - Related: RHEL-23414 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Related: RHEL-24721 - libfuse: null-terminate buffer in fuse_req_getgroups() - Fix feature_notify_inode_expire_only related(rhbz#2188182) - Synchronize expire-only API with upstream. - Related: RHEL-23414 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Related: RHEL-24721 - libfuse: null-terminate buffer in fuse_req_getgroups() - Fix feature_notify_inode_expire_only related(rhbz#2188182) - Synchronize expire-only API with upstream. - Related: RHEL-23414 - Advertise support of FUSE_PARALLEL_DIROPS to kernel - Related: RHEL-24721 - libfuse: null-terminate buffer in fuse_req_getgroups() - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use __cc macro instead of hard-coding gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Merge PR#2: Make annocheck pass, pass -pie to linker, use make_build macro - BR: make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 26.4.13 - Rebase to 26.4.14 - Rebase to 26.4.16 - Rebase to 26.4.18 - Rebase to 26.4.19 - Rebase to 26.4.20 - Rebase to 26.4.16 - Rebase to 26.4.18 - Rebase to 26.4.19 - Rebase to 26.4.20 - Rebase to 26.4.22 - Rebase to 26.4.18 - Rebase to 26.4.19 - Rebase to 26.4.21 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.22 - Rebase to 26.4.23 - Rebase to 26.4.24 - Rebased to 26.4.25 - Rebase to 26.4.18 - Rebase to 26.4.19 - Rebase to 26.4.21 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.22 - Rebase to 26.4.23 - Rebase to 26.4.24 - Rebased to 26.4.25 - Rebased to 26.4.26 - Rebased to 26.4.27 - Rebase to 26.4.19 - Rebase to 26.4.20 - Rebase to 26.4.21 - Add sysusers.d config file to allow rpm to create users/groups automatically - Rebase to 26.4.22 - Rebase to 26.4.23 - Rebase to 26.4.24 - Rebased to 26.4.25 - Rebased to 26.4.26 - Rebased to 26.4.27 - Split the package into the main package and locales subpackage - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 Fix the issue with incorect handling of return values of some processes Resolves: rhbz#2055107 - 8.0.4 - %build: --with-libatomic-ops=yes - drop libatomic_ops dep - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - new package (#2077277) - NVR bump and rebuild, introduce CI gating setup - cut down the required packages, remove -toolchain and -perftools - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - NVR bump and rebuild - require -annobin-plugin-gcc (#2102356) - Use triggers to select which version of the annobin plugin should be used. (#2111976) - Rename gcc plugin to gts-annobin. (#2111977) - Annocheck: Use real filename rather than debuginfo filename. (#2152280) - Annocheck: Add test for binaries built by cross compilers. - Annocheck: Improve heuristic used to detect binaries without code. (#2144533) - GCC Plugin: Fix building with gcc-13. - Annocheck: Improve handling of tool versions. - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment. (#2158386) - Annocheck: Add more special glibc filenames. (#2158100) - Annocheck: Fix handling of empty files. (#2159292) - Annocheck: Add crti.o and crtn.o to the list of known glibc special files. (#2158740) - Annocheck: Fix memory leaks. - Annocheck: Fix handling of file built by multiple versions of gcc. (#2160700) - Spec file: Enable annotated building. - Annocheck: Fix atexit test. Fix recording of version numbers. (#2165528) - Re-enable building with LTO. (#2166579) - Rename gcc plugin to gts-annobin. (#2111977) - Annocheck: Use real filename rather than debuginfo filename. (#2152280) - Annocheck: Add test for binaries built by cross compilers. - Annocheck: Improve heuristic used to detect binaries without code. (#2144533) - GCC Plugin: Fix building with gcc-13. - Annocheck: Improve handling of tool versions. - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment. (#2158386) - Annocheck: Add more special glibc filenames. (#2158100) - Annocheck: Fix handling of empty files. (#2159292) - Annocheck: Add crti.o and crtn.o to the list of known glibc special files. (#2158740) - Annocheck: Fix memory leaks. - Annocheck: Fix handling of file built by multiple versions of gcc. (#2160700) - Spec file: Enable annotated building. - Annocheck: Fix atexit test. Fix recording of version numbers. (#2165528) - Re-enable building with LTO. (#2166579) - Rename gcc plugin to gts-annobin. (#2111977) - Annocheck: Use real filename rather than debuginfo filename. (#2152280) - Annocheck: Add test for binaries built by cross compilers. - Annocheck: Improve heuristic used to detect binaries without code. (#2144533) - GCC Plugin: Fix building with gcc-13. - Annocheck: Improve handling of tool versions. - Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment. (#2158386) - Annocheck: Add more special glibc filenames. (#2158100) - Annocheck: Fix handling of empty files. (#2159292) - Annocheck: Add crti.o and crtn.o to the list of known glibc special files. (#2158740) - Annocheck: Fix memory leaks. - Annocheck: Fix handling of file built by multiple versions of gcc. (#2160700) - Spec file: Enable annotated building. - Annocheck: Fix atexit test. Fix recording of version numbers. (#2165528) - Re-enable building with LTO. (#2166579) - Add gating.yaml file. - Fix reference to LD_FLAGS.. - NVR bump to allow rebuild with the correct tag. - NVR bump to allow rebuild with the correct tag (again). - Adjust Provides, Obsoletes and Requires fields of the sub-packages. - Use GTS-12 gcc to build static libraries. (#2101443) - Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2103056) - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216446) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2220917) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216456) - Add a build requirement on gcc-plugin-annobin. (#2216456) - Add gating.yaml file. - Fix reference to LD_FLAGS.. - NVR bump to allow rebuild with the correct tag. - NVR bump to allow rebuild with the correct tag (again). - Adjust Provides, Obsoletes and Requires fields of the sub-packages. - Use GTS-12 gcc to build static libraries. (#2101443) - Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2103056) - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216446) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2220917) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216456) - Add a build requirement on gcc-plugin-annobin. (#2216456) - Add gating.yaml file. - Fix reference to LD_FLAGS.. - NVR bump to allow rebuild with the correct tag. - NVR bump to allow rebuild with the correct tag (again). - Adjust Provides, Obsoletes and Requires fields of the sub-packages. - Use GTS-12 gcc to build static libraries. (#2101443) - Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2103056) - NVR Bump: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216446) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2220917) - Use z-stream NVR: Fix the Provides fields of the binutils-gold and binutils-devel subpackages. (#2216456) - Add a build requirement on gcc-plugin-annobin. (#2216456) - new package (#2077277) - NVR bump and rebuild, introduce CI gating setup - cut down the required packages, remove -toolchain and -perftools - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - NVR bump and rebuild - require -annobin-plugin-gcc (#2102356) - Use triggers to select which version of the annobin plugin should be used. (#2111976) - update to dwz 0.14 (#1841830) - add make check - use make macros - NVR bump and rebuild - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Fix buld issues. (RHBZ 2042257, Keith Seitz, Andrew Burgess) - Update libipt to 2.0.5. - Fix "sect_index_data not initialized" internal error. (RHBZ 2042664, Kevin Buettner). - Rebase to FSF GDB 11.2. - On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. (This is a workaround for the bogus warning/error that we now see on i686 regarding a "may write a terminating nul past the end of the destination" message for the sprintf() call in global_symbol_searcher::search() in gdb/symtab.c.) - Backport upstream patch which removes sizes from debuginfod download messages when the size is not available (RHBZ 2068280, Aaron Merey). - Rebase GTS (RH BZ 2077494). - Rebuild w/SCL prefix. - NVR bump to include {gating,rpminspect}.yaml. - Do not build -minimal package for GTS. - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - update from releases/gcc-12 branch (#2110583) - fix up std::from_chars behavior in rounding modes other than FE_TONEAREST (PR libstdc++/107468) - Build the annobin plugin. Call it gts-gcc-annobin.so. (#2151927) - Fixed run-time requirement for annobin plugin. (#2151927) - apply an ISL patch (#2154936) - build libisl.so with -g (#2154936) - provide libexec/ symlinks on all RHELs (#2164262) - avoid fma_chain for -march=alderlake and sapphirerapids (#2168919) - fix conditions for using memcmp in std::lexicographical_compare_three_way (PR libstdc++/113960, RHEL-30832) - bump NVR (RHEL-30832) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-44850) - new package (#2077277) - NVR bump and rebuild, introduce CI gating setup - cut down the required packages, remove -toolchain and -perftools - use rpm/macros.gcc-toolset-12-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - NVR bump and rebuild - require -annobin-plugin-gcc (#2102356) - Use triggers to select which version of the annobin plugin should be used. (#2111976) - new package (#2077277) - NVR bump and rebuild, introduce CI gating setup - cut down the required packages, remove -toolchain and -perftools - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - NVR bump and rebuild - require -annobin-plugin-gcc (#2102356) - Use triggers to select which version of the annobin plugin should be used. (#211175) - update to GTS 13 (#2188491) - drop gcc-toolset-13-build - don't require other GTS 13 packages yet - require GTS 13 packages (#2217519) - Annocheck: Remove dependency upon libiberty. - Annocheck: Ignore AArch64 $x and $d symbols. (#2221192) - GCC Plugin: Suppress active checks for fortran sources. Improve scanning of COLLECT_GCC_OPTIONS. - LLVM Plugin: Fix building with LLVM version 17. (RHEL-17311) - GCC Plugin: Add support for -fhardended. - Update glibc detection heuristics for PPC64. (RHEL-16453) - Fix another atexit test failure. (#2247481) - Fix atexit test failure. - Notes: Add support for string format notes. - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays - Annobin: Add future test of these options. - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration. - Annobin: Add test for these warnings. - GCC Plugin: Enable string note format by default. - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers. - Annocheck: Add test for FIPS compliant GO binaries. - Annocheck: Fix double free. (#2226749) - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505) - Rebuild with LLVM 18. (RHEL-49954) - Rebase to 12.52 in order to bring in fixes for LLVM 18. - Rebase to 12.65. (RHEL-51018) - Annocheck: Fix recording arguments for later re-use. (RHEL-50802) - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3. - Annocheck: Add improvements to the builtby utility. - Annocheck: Add support for ADA binaries. - Annocheck: Add support for binaries built from more than two high level source languages. - Annocheck: Add support for object files containing no executable code. - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack. - Annocheck: Add support for Fortran binaries. - Annocheck: Add heuristic for detecting parts of the CGO runtime library. - Annocheck: Add improvements for handling Clang runtime binaries. - Annocheck: Add tweaks for mixed Rust/C binaries. (#2284605) - Annocheck: Add more glibc source file names. - Annocheck: Skip GAPS test for GO binaries. (RHEL-36308) - Annocheck: Remove some false positives for Rust binaries. (#2280239) - Annocheck: Defer passing the branch protection test until all notes have been checked. - GCC Plugin: Add extra code for detecting the branch protection setting. (RHEL-35958) - Spec File: Use correct names for the symlinks. (RHEL-53574) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53574) - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - Rebase to bring in improvements for locating string notes. (RHEL-79807) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77328) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - Annocheck: Remove dependency upon libiberty. - Annocheck: Ignore AArch64 $x and $d symbols. (#2221192) - GCC Plugin: Suppress active checks for fortran sources. Improve scanning of COLLECT_GCC_OPTIONS. - LLVM Plugin: Fix building with LLVM version 17. (RHEL-17311) - GCC Plugin: Add support for -fhardended. - Update glibc detection heuristics for PPC64. (RHEL-16453) - Fix another atexit test failure. (#2247481) - Fix atexit test failure. - Notes: Add support for string format notes. - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays - Annobin: Add future test of these options. - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration. - Annobin: Add test for these warnings. - GCC Plugin: Enable string note format by default. - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers. - Annocheck: Add test for FIPS compliant GO binaries. - Annocheck: Fix double free. (#2226749) - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505) - Rebuild with LLVM 18. (RHEL-49954) - Rebase to 12.52 in order to bring in fixes for LLVM 18. - Rebase to 12.65. (RHEL-51018) - Annocheck: Fix recording arguments for later re-use. (RHEL-50802) - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3. - Annocheck: Add improvements to the builtby utility. - Annocheck: Add support for ADA binaries. - Annocheck: Add support for binaries built from more than two high level source languages. - Annocheck: Add support for object files containing no executable code. - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack. - Annocheck: Add support for Fortran binaries. - Annocheck: Add heuristic for detecting parts of the CGO runtime library. - Annocheck: Add improvements for handling Clang runtime binaries. - Annocheck: Add tweaks for mixed Rust/C binaries. (#2284605) - Annocheck: Add more glibc source file names. - Annocheck: Skip GAPS test for GO binaries. (RHEL-36308) - Annocheck: Remove some false positives for Rust binaries. (#2280239) - Annocheck: Defer passing the branch protection test until all notes have been checked. - GCC Plugin: Add extra code for detecting the branch protection setting. (RHEL-35958) - Spec File: Use correct names for the symlinks. (RHEL-53574) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53574) - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - Rebase to bring in improvements for locating string notes. (RHEL-79807) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77328) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - Annocheck: Remove dependency upon libiberty. - Annocheck: Ignore AArch64 $x and $d symbols. (#2221192) - GCC Plugin: Suppress active checks for fortran sources. Improve scanning of COLLECT_GCC_OPTIONS. - LLVM Plugin: Fix building with LLVM version 17. (RHEL-17311) - GCC Plugin: Add support for -fhardended. - Update glibc detection heuristics for PPC64. (RHEL-16453) - Fix another atexit test failure. (#2247481) - Fix atexit test failure. - Notes: Add support for string format notes. - GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays - Annobin: Add future test of these options. - GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration. - Annobin: Add test for these warnings. - GCC Plugin: Enable string note format by default. - Annocheck: Change GO FIPS test to look for CGO_ENABLED markers. - Annocheck: Add test for FIPS compliant GO binaries. - Annocheck: Fix double free. (#2226749) - GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505) - Rebuild with LLVM 18. (RHEL-49954) - Rebase to 12.52 in order to bring in fixes for LLVM 18. - Rebase to 12.65. (RHEL-51018) - Annocheck: Fix recording arguments for later re-use. (RHEL-50802) - GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3. - Annocheck: Add improvements to the builtby utility. - Annocheck: Add support for ADA binaries. - Annocheck: Add support for binaries built from more than two high level source languages. - Annocheck: Add support for object files containing no executable code. - Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack. - Annocheck: Add support for Fortran binaries. - Annocheck: Add heuristic for detecting parts of the CGO runtime library. - Annocheck: Add improvements for handling Clang runtime binaries. - Annocheck: Add tweaks for mixed Rust/C binaries. (#2284605) - Annocheck: Add more glibc source file names. - Annocheck: Skip GAPS test for GO binaries. (RHEL-36308) - Annocheck: Remove some false positives for Rust binaries. (#2280239) - Annocheck: Defer passing the branch protection test until all notes have been checked. - GCC Plugin: Add extra code for detecting the branch protection setting. (RHEL-35958) - Spec File: Use correct names for the symlinks. (RHEL-53574) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53574) - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - Rebase to bring in improvements for locating string notes. (RHEL-79807) - Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files. (RHEL-79264) - Annocheck: Fix resource leak. (RHEL-79253) - Annocheck: Fix double free. Add special handling for COMBOOT modules. - Annocheck: Improve diagnostics when a separate debug info file cannot be found. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77328) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - Disable building static libraries with LTO. (RHEL-18800) - Spec File: Do not use of the system zlib by default. (RHEL-19373) - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303) - Spec File: Restore the SElinux context to %{_libdir}. (RHEL-22818) - [2.40-18: was a failed attempt to fix RHEL-22818] - Add support for AMD's znver5 architecture extension. (RHEL-23798) - Run x86_64 assembler tests for znver5 architecture extension. (RHEL-23798) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130655) - Disable building static libraries with LTO. (RHEL-18800) - Spec File: Do not use of the system zlib by default. (RHEL-19373) - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303) - Spec File: Restore the SElinux context to %{_libdir}. (RHEL-22818) - [2.40-18: was a failed attempt to fix RHEL-22818] - Add support for AMD's znver5 architecture extension. (RHEL-23798) - Run x86_64 assembler tests for znver5 architecture extension. (RHEL-23798) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130655) - Disable building static libraries with LTO. (RHEL-18800) - Spec File: Do not use of the system zlib by default. (RHEL-19373) - Spec File: Do not check the mtime of ld.bfd. (RHEL-21303) - Spec File: Restore the SElinux context to %{_libdir}. (RHEL-22818) - [2.40-18: was a failed attempt to fix RHEL-22818] - Add support for AMD's znver5 architecture extension. (RHEL-23798) - Run x86_64 assembler tests for znver5 architecture extension. (RHEL-23798) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130655) - new package (#2188495) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) From Sergey Mende: - Backport upstream patch "gdb: call check_typedef at beginning of dwarf_expr_context::fetch_result". (Simon Marchi) - More tweaks to gdb-6.6-buildid-locate-rpm.patch, in which rpmTag is replaced with rpmDbiTagVal. - NVR bump for failed build. - Remove gdb-rhbz1398387-tab-crash-test.patch as that test didn't work anymore. - Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major and $_gdb_minor will be obtained correctly. - Initial import for GTS13. - Backport binutls/29699 "Fix an illegal memory access when parsing..." (Nick Clifton, RHBZ 2153228) - Backport "Update gdb-add-index.sh ..." (Andrew Burgess, RHBZ 2213228) - Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler." (Nick Clifton) - Backport "Add a recursion limit to the demangle_const function in the Rust demangler." (Nick Clifton, RHEL-4234) - Fix issue introduced when backporting the recursion limit to the rust demangler. - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - update from releases/gcc-13 branch - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245, fortran/111837, fortran/112316, libbacktrace/111315, libbacktrace/112263, libstdc++/110944, libstdc++/111172, libstdc++/111936, libstdc++/112089, libstdc++/112314, middle-end/111253, middle-end/111818, modula2/111756, modula2/112110, target/101177, target/110170, target/111001, target/111366, target/111367, target/111380, target/111935, target/112443, tree-optimization/111397, tree-optimization/111445, tree-optimization/111489, tree-optimization/111583, tree-optimization/111614, tree-optimization/111622, tree-optimization/111694, tree-optimization/111764, tree-optimization/111820, tree-optimization/111833, tree-optimization/111917 - fix aarch64 RA ICE (#2241139, PR target/111528) - fix ia32 doubleword rotates (#2238781, PR target/110792) - update from releases/gcc-13 branch - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633, c/112339, fortran/111880, fortran/112764, libgomp/111413, libstdc++/112348, libstdc++/112491, libstdc++/112607, middle-end/111497, target/53372, target/110411, target/111408, target/111815, target/111828, target/112672, tree-optimization/111137, tree-optimization/111465, tree-optimization/111967, tree-optimization/112496 - add -fno-stack-protector to aarch64 tests (RHEL-17684) - add f95 (RHEL-17655) - fix for libstdc++_nonshared.a on ppc64le (RHEL-17960) - use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093) - update from releases/gcc-13 branch - GCC 13.3 release - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577, analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882, analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969, analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473, bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224, c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769, c++/113141, c++/113966, c++/114303, c++/114377, c++/114537, c++/114561, c++/114562, c++/114572, c++/114580, c++/114634, c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337, fortran/50410, fortran/55978, fortran/89462, fortran/93678, fortran/95374, fortran/101135, fortran/102003, fortran/103707, fortran/103715, fortran/103716, fortran/104352, fortran/106987, fortran/106999, fortran/107426, fortran/110987, fortran/112407, fortran/113799, fortran/113866, fortran/113885, fortran/113956, fortran/114001, fortran/114474, fortran/114535, fortran/114739, fortran/114825, fortran/115039, gcov-profile/114115, gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616, ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731, libquadmath/114533, libstdc++/66146, libstdc++/93672, libstdc++/104606, libstdc++/107800, libstdc++/108976, libstdc++/110050, libstdc++/110054, libstdc++/113841, libstdc++/114147, libstdc++/114316, libstdc++/114359, libstdc++/114367, libstdc++/114401, libstdc++/114750, libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655, middle-end/110027, middle-end/111151, middle-end/111632, middle-end/111683, middle-end/112684, middle-end/112732, middle-end/113396, middle-end/113622, middle-end/114070, middle-end/114348, middle-end/114552, middle-end/114599, middle-end/114734, middle-end/114753, middle-end/114907, rtl-optimization/54052, rtl-optimization/114415, rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696, sanitizer/114687, sanitizer/114743, sanitizer/114956, sanitizer/115172, target/88309, target/101865, target/105522, target/110621, target/111234, target/111600, target/111610, target/111822, target/112397, target/113095, target/113233, target/113950, target/114049, target/114130, target/114160, target/114172, target/114175, target/114272, target/114747, target/114752, target/114794, target/114837, target/114848, target/114981, testsuite/111066, testsuite/112297, testsuite/114034, testsuite/114036, testsuite/114662, tree-optimization/91838, tree-optimization/109925, tree-optimization/110838, tree-optimization/111009, tree-optimization/111268, tree-optimization/111407, tree-optimization/111736, tree-optimization/111882, tree-optimization/112281, tree-optimization/112303, tree-optimization/112793, tree-optimization/112961, tree-optimization/112991, tree-optimization/113552, tree-optimization/113630, tree-optimization/113670, tree-optimization/113831, tree-optimization/113910, tree-optimization/114027, tree-optimization/114115, tree-optimization/114121, tree-optimization/114203, tree-optimization/114231, tree-optimization/114246, tree-optimization/114375, tree-optimization/114396, tree-optimization/114485, tree-optimization/114566, tree-optimization/114672, tree-optimization/114733, tree-optimization/114736, tree-optimization/114749, tree-optimization/114787, tree-optimization/114799, tree-optimization/114876, tree-optimization/114965, tree-optimization/115143, tree-optimization/115152, tree-optimization/115154 - add --without-clang-plugin --without-llvm-plugin to annobin configure options - update from releases/gcc-13 branch - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598, fortran/110415, fortran/114827, fortran/115150, libstdc++/114940, libstdc++/115269, middle-end/108789, rtl-optimization/114902, rtl-optimization/115092, target/113281, target/113719, target/115297, target/115317, target/115324, tree-optimization/115192, tree-optimization/115307, tree-optimization/115337 - fix a shell condition (RHEL-40722) - backport a fix for modes_1.f90 (RHEL-40234) - fix up pointer types to may_alias structures (PR c/114493, RHEL-40244) - fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382) - bump for another rebuild (RHEL-78382) - new package (#2077277) - NVR bump and rebuild, introduce CI gating setup - cut down the required packages, remove -toolchain and -perftools - use rpm/macros.gcc-toolset-13-enable for %enable_devtoolset12 and put it in the -runtime subpackage (#2009528) - NVR bump and rebuild - require -annobin-plugin-gcc (#2102356) - Use triggers to select which version of the annobin plugin should be used. (#211175) - update to GTS 13 (#2188491) - drop gcc-toolset-13-build - don't require other GTS 13 packages yet - require GTS 13 packages (#2217519) - require GTS 13 packages (#2217520) - update to GTS 14 (RHEL-34748) - don't require gdb on RHEL9 (RHEL-54245) - Drop the sudo wrapper script (RHEL-90066) - Annocheck: Stop spurious assembler warnings. (RHEL-53213) - Annocheck: Stop warnings about known gaps. (RHEL-53218) - Annocheck: Fix stack realign test. (#2302427) - Spec File: Use correct directory for plugin installation. (RHEL-53209) - Spec File: Disable plugin when running on wrong major version of the compiler. - Spec File: Disable bootstrapping. (RHEL-53543) - Spec File: Use correct names for the plugins. (RHEL-53209) - Spec File: Use correct names for the symlinks. (RHEL-53209) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53209) - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - NVR Bump to allow rebuilding with annotation. - Rebase for GTS 14.1 release. (RHEL-76932) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77605) - Annocheck: Stop spurious assembler warnings. (RHEL-53213) - Annocheck: Stop warnings about known gaps. (RHEL-53218) - Annocheck: Fix stack realign test. (#2302427) - Spec File: Use correct directory for plugin installation. (RHEL-53209) - Spec File: Disable plugin when running on wrong major version of the compiler. - Spec File: Disable bootstrapping. (RHEL-53543) - Spec File: Use correct names for the plugins. (RHEL-53209) - Spec File: Use correct names for the symlinks. (RHEL-53209) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53209) - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - NVR Bump to allow rebuilding with annotation. - Rebase for GTS 14.1 release. (RHEL-76932) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77605) - Annocheck: Stop spurious assembler warnings. (RHEL-53213) - Annocheck: Stop warnings about known gaps. (RHEL-53218) - Annocheck: Fix stack realign test. (#2302427) - Spec File: Use correct directory for plugin installation. (RHEL-53209) - Spec File: Disable plugin when running on wrong major version of the compiler. - Spec File: Disable bootstrapping. (RHEL-53543) - Spec File: Use correct names for the plugins. (RHEL-53209) - Spec File: Use correct names for the symlinks. (RHEL-53209) - BuiltBy: Fix seg-fault when comparing language version strings. (RHEL-53497) - Spec File: Use correct names for the symlinks. (RHEL-53209) - Clang & LLVM Plugins: Include install directory in binary. (RHEL-54069) - NVR Bump to allow rebuilding with annotation. - Rebase for GTS 14.1 release. (RHEL-76932) - Annocheck: Fix locating string notes (again). Add exception for glibc benchmark tests. (RHEL-76456) - Annocheck: Add crtoffloadtableS.o to list of known gcc binaries. (RHEL-760404) - Annocheck: Fix the --debug-dir option. - Annocheck: Fix corrupt warning message when unable to locate separate debug info files. - Annocheck: Remove spurious debugging messages. - Annocheck: Always look for annobin notes in separate debug info files. (RHEL-75778) - Annocheck: Support multiple --debug-rpm and --debug-file options. (RHEL-73349) - Annocheck: Add support for sys-root'ed glibc packages. (RHEL-71296) - GCC Plugin: Tidy up use of gcc's diagnoatic headers. (#32429) - Testsuite: Use configured compiler when running tests. - GCC Plugin: Fix building with gcc 15. (#32429) - Annocheck: Fix overly long debug messages. - Annocheck: Rename rwx-seg test to load-segments. Add more checks. Add check for gaps as a future fail. - Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries. - Annocheck: Add --enable-future to enable future fail components in normal tests. - Annocheck: Fix bug preventing the inclusion of the rpm name in reports. - Annocheck: Add more exceptions for gcc binaries. (RHEL-33365) - Annocheck: Add --skip-passes option. - Annocheck: Add exceptions for gcc binaries. (RHEL-33365) - Annocheck: Skip property note test for i386 binaries created by LLVM. (#2323797) - Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info. (RHEL-65411) - GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS. - Annocheck: Look for -fstack-clash-protection in DW_AT_producer string. (RHEL-77605) - Initial import of upstream 2.41 release with patches from Fedora 40. - NVR Bump to allow rebuilding with GTS-14 gcc. (RHEL-53516) - Fix restoring contect to gprofng.rc file. (RHEL-54563) - Backport fixes for PR 32082 and PR 32153 in order to fix the PR 20267 linker tests. (RHEL-80372) - Fix assertion failure in ppc64 ld due to compiler miscompilation. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130667) - Initial import of upstream 2.41 release with patches from Fedora 40. - NVR Bump to allow rebuilding with GTS-14 gcc. (RHEL-53516) - Fix restoring contect to gprofng.rc file. (RHEL-54563) - Backport fixes for PR 32082 and PR 32153 in order to fix the PR 20267 linker tests. (RHEL-80372) - Fix assertion failure in ppc64 ld due to compiler miscompilation. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130667) - Initial import of upstream 2.41 release with patches from Fedora 40. - NVR Bump to allow rebuilding with GTS-14 gcc. (RHEL-53516) - Fix restoring contect to gprofng.rc file. (RHEL-54563) - Backport fixes for PR 32082 and PR 32153 in order to fix the PR 20267 linker tests. (RHEL-80372) - Fix assertion failure in ppc64 ld due to compiler miscompilation. - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130667) - new package (RHEL-29852) - Add dwz-0.14-sw-pr-32146.patch - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - do not hide _ZSt21ios_base_library_initv - bump NVR (RHEL-53492) - update from releases/gcc-14 branch (RHEL-74061) - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996, analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463, c++/102594, c++/109859, c++/113108, c++/114854, c++/115008, c++/115430, c++/115657, c++/116108, c++/116634, c++/117158, c++/117317, c++/117614, c++/117615, c++/117792, c++/117825, c++/117845, c++/117880, c++/117925, c++/117985, c++/118060, c++/118069, driver/117942, fortran/84674, fortran/84869, fortran/105054, fortran/109105, fortran/109345, fortran/115070, fortran/115348, fortran/116388, fortran/117730, fortran/117763, fortran/117774, fortran/117791, fortran/117797, fortran/117819, fortran/117820, fortran/117843, fortran/117897, libgomp/117851, libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236, libstdc++/109517, libstdc++/109976, libstdc++/112349, libstdc++/112641, libstdc++/117520, libstdc++/117560, libstdc++/117822, libstdc++/117962, libstdc++/117966, libstdc++/118035, libstdc++/118093, middle-end/43374, middle-end/102674, middle-end/116997, middle-end/117433, middle-end/117458, middle-end/117459, middle-end/117847, middle-end/118024, modula2/114529, modula2/115003, modula2/115057, modula2/115164, modula2/115276, modula2/115328, modula2/115536, modula2/115540, modula2/115804, modula2/115823, modula2/115957, modula2/116048, modula2/116181, modula2/116378, modula2/116557, modula2/116918, modula2/117120, modula2/117371, modula2/117555, modula2/117660, modula2/117904, modula2/117948, other/116603, preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799, rtl-optimization/117095, sanitizer/117960, target/64242, target/114801, target/114942, target/116371, target/116629, target/116999, target/117045, target/117105, target/117304, target/117357, target/117408, target/117418, target/117443, target/117500, target/117525, target/117562, target/117564, target/117642, target/117659, target/117675, target/117744, target/117926, testsuite/103298, testsuite/109360, tree-optimization/94589, tree-optimization/112376, tree-optimization/116463, tree-optimization/117142, tree-optimization/117254, tree-optimization/117307, tree-optimization/117333, tree-optimization/117398, tree-optimization/117417, tree-optimization/117439, tree-optimization/117574, tree-optimization/117594, tree-optimization/117612, tree-optimization/117912 - fix up -freport-bug default (#2330362, RHEL-70192) - revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on aarch64 to match upstream (RHEL-74059) - consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509) - have gfortran require install-info (RHEL-62417) - disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387) - libstdc++: Fix -Warray-bounds warning in std::vector<bool> (RHEL-90244) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-84679) - Put the libstdc++ AS_NEEDED in the right places (RHEL-84679) - Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790) - Fix glibc32 dependency (RHEL-112209) - Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589) - require GTS 13 packages (#2217520) - update to GTS 14 (RHEL-34748) - don't require gdb on RHEL9 (RHEL-54245) - Drop the sudo wrapper script (RHEL-90066) - new package (RHELPLAN-171625) - Drop scl-utils dependency on c10s and later. - Split out a devel package to break the dependency look with gts-gcc and gts-binutils. - Drop the sudo wrapper script. - New rhel10-specific script to replace scl-enable (RHEL-91830). - Split out scripts into a -runtime package on RHEL10 (RHEL-94841) - Man page and documentation updates (RHEL-96023) - Compress man page and fix its name (RHEL-98730) - Initial commit: Import Fedora 42 binutils to GTS-15. - Use system alternatives even for bootstrap. - Avoid using SCL for c10s. - Disable bootstrapping. (RHEL-112561) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130670) - Initial commit: Import Fedora 42 binutils to GTS-15. - Use system alternatives even for bootstrap. - Avoid using SCL for c10s. - Disable bootstrapping. (RHEL-112561) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130670) - Initial commit: Import Fedora 42 binutils to GTS-15. - Use system alternatives even for bootstrap. - Avoid using SCL for c10s. - Disable bootstrapping. (RHEL-112561) - Fix a potential illegal memory access when linking a corrupt input file. (RHEL-130670) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - new package (RHELPLAN-171625) - Drop scl-utils dependency on c10s and later. - Split out a devel package to break the dependency look with gts-gcc and gts-binutils. - Drop the sudo wrapper script. - New rhel10-specific script to replace scl-enable (RHEL-91830). - Split out scripts into a -runtime package on RHEL10 (RHEL-94841) - Man page and documentation updates (RHEL-96023) - Compress man page and fix its name (RHEL-98730) - Update to 3.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.91 - Update to 3.38.0 - Avoid BuildRequiring vala twice - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.40.0 - Tighten soname globs - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.91 - Update to 3.38.0 - Avoid BuildRequiring vala twice - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.40.0 - Tighten soname globs - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.91 - Update to 3.38.0 - Avoid BuildRequiring vala twice - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.40.0 - Tighten soname globs - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src) - Resolves: #1599032 - update to 2.3.0 - add dependency on libraqm - remove gdlib-config - fix gdImageStringFT() fails for empty strings https://github.com/libgd/libgd/issues/615 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upstream released new version 2.3.1 - patch bug615 is no more needed - fixed by upstream in release - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on x390s - XFAIL_TEST definition for x390s is no more necessary - Add condition if fedora for packages not available in RHEL - enable avif support - use bcond - rebase to version 2.3.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src) - Resolves: #1599032 - update to 2.3.0 - add dependency on libraqm - remove gdlib-config - fix gdImageStringFT() fails for empty strings https://github.com/libgd/libgd/issues/615 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upstream released new version 2.3.1 - patch bug615 is no more needed - fixed by upstream in release - gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on x390s - XFAIL_TEST definition for x390s is no more necessary - Add condition if fedora for packages not available in RHEL - enable avif support - use bcond - rebase to version 2.3.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (poppler) - Rebuilt for libarrow 19 - Update to 3.10.2 - Rebuild for libarrow 19 in poppler's sidetag - Add definitions of missing int16_t and int32_t - Rebuild (poppler) - Enable blosc - Update to 3.10.3 - Fix *.py scripts packaging - Rebuilt for Python 3.14 - Rebuild (poppler) - Rebuilt for libarrow 19 - Update to 3.10.2 - Rebuild for libarrow 19 in poppler's sidetag - Add definitions of missing int16_t and int32_t - Rebuild (poppler) - Enable blosc - Update to 3.10.3 - Fix *.py scripts packaging - Rebuilt for Python 3.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Remove upstreamed gdb-6.3-gstack-20050411.patch. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Bump the release number. - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Backport amd64 decoding fixes Resolves: RHEL-93850 - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Remove upstreamed gdb-6.3-gstack-20050411.patch. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Bump the release number. - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Backport amd64 decoding fixes Resolves: RHEL-93850 - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Remove upstreamed gdb-6.3-gstack-20050411.patch. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Bump the release number. - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Backport amd64 decoding fixes Resolves: RHEL-93850 - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Remove upstreamed gdb-6.3-gstack-20050411.patch. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Bump the release number. - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Backport amd64 decoding fixes Resolves: RHEL-93850 - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - remove gdb-test-bt-cfi-without-die.patch. This test has been accepted upstream and will make its way back to testing with the GDB 17 release. - Remove upstreamed gdb-6.3-gstack-20050411.patch. - Rebase to FSF GDB 16.2. Dropped: gdb-backport-buildid-related-changes.patch gdb-catchpoint-re-set.patch gdb-remove-qnx-neutrino-support.patch Modified: gdb-add-rpm-suggestion-script.patch - Bump the release number. - Backport "Fix gstack issues" from upstream. (Keith Seitz, RH BZ 2354997) - Rebase to FSF GDB 16.3. Deleted: gdb-rhbz2354997-gstack-drop-readnever.patch - Rebase RHEL 9's GDB from 14.2 to 16.3 Resolves: RHEL-91381 Resolves: RHEL-50069 - Backport amd64 decoding fixes Resolves: RHEL-93850 - Include gdb-index-generation-fixes.patch (renamed). (Tom Tromey and Andrew Burgess, RHEL-86890) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 1.0.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.0.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1.0.7 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix incorrect byte order of partition names on big-endian systems resolves: #2006964 - Add upstream tests as a gating test related: #2006964 - Backport fixes for CVE-2022-48622 - Resolves: RHEL-36432 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102354 - Fix an oversight - Related: RHEL-102354 - Backport fixes for CVE-2026-5201 - Related: RHEL-163069 - Backport fixes for CVE-2022-48622 - Resolves: RHEL-36432 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102354 - Fix an oversight - Related: RHEL-102354 - Backport fixes for CVE-2026-5201 - Related: RHEL-163069 - Backport fixes for CVE-2022-48622 - Resolves: RHEL-36432 - Backport fixes for CVE-2025-7345 - Resolves: RHEL-102354 - Fix an oversight - Related: RHEL-102354 - Backport fixes for CVE-2026-5201 - Related: RHEL-163069 - Fix leak on new connections Resolves: RHEL-98562 - Allow adding custom parameters to Xorg Resolves: RHEL-81194 - Instead of allowing adding custom parameters to Xorg, only allow adding -nocursor. Allowing adding custom parameters is a potential security issue. Related: RHEL-81194 - Remove adding -nocursor option. Using a cursor-theme already allows this. Related: RHEL-81194 - Fix precedence order when loading sessions Resolves: RHEL-4133 - Fix issue on conflicting sessions when they are remote Resolves: RHEL-123357 - Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset Resolves: RHEL-117034 - Now Plymouth will quit even when no monitor is connected. Resolves: RHEL-129215 - Fix recording wtmp/utmp/btmp Resolves: RHEL-129305 - Terminate conflicting sesions started outside of GDM Resolves: RHEL-4108 - Remove adding -nocursor option. Using a cursor-theme already allows this. Related: RHEL-81194 - Fix precedence order when loading sessions Resolves: RHEL-4133 - Fix issue on conflicting sessions when they are remote Resolves: RHEL-123357 - Fix Handle GDM_SUPPORTED_SESSION_TYPES being unset Resolves: RHEL-117034 - Now Plymouth will quit even when no monitor is connected. Resolves: RHEL-129215 - Fix recording wtmp/utmp/btmp Resolves: RHEL-129305 - Terminate conflicting sesions started outside of GDM Resolves: RHEL-4108 - Update how GDM handles Registering session/display to properly terminate plymouth Resolves: https://redhat.atlassian.net/browse/RHEL-178706 - retrigger new build in correct target Resolves: https://redhat.atlassian.net/browse/RHEL-178706 - Create display in "legacy-xorg" mode checking displays in tty Resolves: https://redhat.atlassian.net/browse/RHEL-180820 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't use gsettings key that was removed from nautilus 40 (#1931020) - Update to 40.0 - Filter provides for plugin .so files - Add 40.0 release info to appdata - Drop tepl dependency Related: #1948446 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Don't build gedit-plugin-charmap and gedit-plugin-git for RHEL - Update to 40.0 - Filter provides for plugin .so files - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid depending on tepl as it's unmainained upstream - Rebuild Related: #1951302 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against new LibRaw soname Resolves: RHEL-770 - New upstream release 0.4.58 (RHEL-88143) - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - New upstream release 0.4.62 (RHEL-88143) - Fix CVE-2026-2050 (RHEL-188266) - Rebuild against new LibRaw soname Resolves: RHEL-770 - New upstream release 0.4.58 (RHEL-88143) - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - New upstream release 0.4.62 (RHEL-88143) - Fix CVE-2026-2050 (RHEL-188266) - Rebuild against new LibRaw soname Resolves: RHEL-770 - New upstream release 0.4.58 (RHEL-88143) - New upstream release 0.4.62 (RHEL-88143) - New upstream release 0.4.58 (RHEL-88143) - New upstream release 0.4.62 (RHEL-88143) - Fix CVE-2026-2050 (RHEL-188266) - Backport Fedora change to provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format) - Resolves: RHEL-78739 - Bump release - Backport Fedora change to provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format) - Resolves: RHEL-78739 - Bump release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + geocode-glib-3.26.2-1 - Update to 3.26.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + geocode-glib-3.26.2-1 - Update to 3.26.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Latest upstream - Add ASN subpackage - Latest upstream - Latest upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Latest upstream - Add ASN subpackage - Latest upstream - Latest upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.13.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers Add gettext-0.21-disable-libtextstyle.patch Do not build libtextstyle, as it depends on libcroco which is now unmaintained and has known security bugs. Obsolete libtextstyle and libtextstyle-devel packages. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add Java 17 support patch from Mamoru Tasaka (rhbz#2182696) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers Add gettext-0.21-disable-libtextstyle.patch Do not build libtextstyle, as it depends on libcroco which is now unmaintained and has known security bugs. Obsolete libtextstyle and libtextstyle-devel packages. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add Java 17 support patch from Mamoru Tasaka (rhbz#2182696) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers Add gettext-0.21-disable-libtextstyle.patch Do not build libtextstyle, as it depends on libcroco which is now unmaintained and has known security bugs. Obsolete libtextstyle and libtextstyle-devel packages. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add Java 17 support patch from Mamoru Tasaka (rhbz#2182696) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add gettext-0.21-covscan.patch to fix issues detected by static analyzers Add gettext-0.21-disable-libtextstyle.patch Do not build libtextstyle, as it depends on libcroco which is now unmaintained and has known security bugs. Obsolete libtextstyle and libtextstyle-devel packages. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add Java 17 support patch from Mamoru Tasaka (rhbz#2182696) - define ghc_devel_prof to handle prof/devel BRs across releases - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-43115 - Resolves: RHEL-10185 - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-43115 - Resolves: RHEL-10185 - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-43115 - Resolves: RHEL-10185 - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-43115 - Resolves: RHEL-10185 - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-43115 - Resolves: RHEL-10185 - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-43115 - Resolves: RHEL-10185 - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864) - rebuild - fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864) - rebuild - fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157133) - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Make Git-LFS FIPS compliant - Resolves: RHEL-53086 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791 - Update to 3.6.1 - Resolves: RHEL-73940 - Rebuild with new Golang - Resolves: RHEL-89304 - Add patch to fix build failures with Go 1.24< - Resolves: RHEL-106475 - Update to 3.7.1 - Resolves: RHEL-118154, RHEL-122429 - Rebuild with new Golang - Resolves: RHEL-140548 - Rebuild with new Golang - Resolves: RHEL-146102, RHEL-149638 - Rebuild with new Golang - Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838 - Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode incorrectly accepting all-ASCII xn-- labels - Resolves: RHEL-183797 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791 - Update to 3.6.1 - Resolves: RHEL-73940 - Rebuild with new Golang - Resolves: RHEL-89304 - Add patch to fix build failures with Go 1.24< - Resolves: RHEL-106475 - Update to 3.7.1 - Resolves: RHEL-118154, RHEL-122429 - Rebuild with new Golang - Resolves: RHEL-140548 - Rebuild with new Golang - Resolves: RHEL-146102, RHEL-149638 - Rebuild with new Golang - Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838 - Fix CVE-2026-39821: vendored golang.org/x/net/idna ToUnicode incorrectly accepting all-ASCII xn-- labels - Resolves: RHEL-183797 - Rebuild with new Golang - Resolves: RHEL-187329 - Rebuild with new Golang - Resolves: RHEL-32571 - Make Git-LFS FIPS compliant - Resolves: RHEL-53086 - Update to 3.6.0 - Resolves: RHEL-63968, RHEL-61045, RHEL-47219, RHEL-43318, RHEL-35936, RHEL-2791 - Update to 3.6.1 - Resolves: RHEL-73940 - Rebuild with new Golang - Resolves: RHEL-89304 - Add patch to fix build failures with Go 1.24< - Resolves: RHEL-106475 - Update to 3.7.1 - Resolves: RHEL-118154, RHEL-122429 - Rebuild with new Golang - Resolves: RHEL-140548 - Rebuild with new Golang - Resolves: RHEL-146102, RHEL-149638 - Rebuild with new Golang - Resolves: RHEL-158765, RHEL-166675, RHEL-167677, RHEL-170838 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Bundle mozjs (#1958111) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.68.3 Resolves: #1993764 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Update to 1.68.4 - Increate test timeouts to make it more reliable on armv7 Resolves: #2005774 - Update to 1.68.5 Resolves: #2054085 - Update to 1.68.6 Resolves: #2066167 - Guard against invalid gobject property access Resolves: #2170044 - Always initialize callback return value Resolves: #2196877 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.0 - Switch to the meson build system - Update to 3.38.0 - Temporarily ship previous soname for ABI compat - Drop compat ABI version - Update to 3.38.1 - Update to 3.38.2 - Drop old obsoletes - BR python3-gobject-devel rather than pygobject3-devel - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.0 - Switch to the meson build system - Update to 3.38.0 - Temporarily ship previous soname for ABI compat - Drop compat ABI version - Update to 3.38.1 - Update to 3.38.2 - Drop old obsoletes - BR python3-gobject-devel rather than pygobject3-devel - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2024-34397, signal subscription vulnerabilities - Resolves: RHEL-35775 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2024-34397, signal subscription vulnerabilities - Resolves: RHEL-35775 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-15588: limit D-Bus auth line read length - Fix CVE-2024-34397, signal subscription vulnerabilities - Resolves: RHEL-35775 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Add support for x-gvfs-trash mount option - Resolves: RHEL-52360 - Add patches for CVE-2024-52533 and CVE-2025-4373 - Update GDateTime test for new tzdata - Resolves: RHEL-94483 - Resolves: RHEL-102844 - gdbusconnection: Prevent sending a serial of zero on overflow - Resolves: RHEL-114059 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Add patch for CVE-2025-13601 - Fix GUnixMount issues - Add patch for CVE-2025-14087 and CVE-2025-14512 - Fix CVE-2026-58016: broken node element nesting validation in D-Bus introspection XML parsing - Resolves: RHEL-190632 - Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context - Resolves: RHEL-212261 - Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list - Resolves: RHEL-190589 - Fix CVE-2026-58013: buffer over-read in GIOChannel with long terminators - Resolves: RHEL-212236 - Fix CVE-2026-58011: range validation in g_date_time_add_full() - Resolves: RHEL-212194 - Fix CVE-2026-58012: buffer overflow in gregex.c with G_REGEX_RAW - Resolves: RHEL-212217 - Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking - Resolves: RHEL-212157 - Fix CVE-2026-15588: limit D-Bus auth line read length - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Update locales for Croatia to use EUR as currency symbol (RHEL-140105) - Optimize trylock for high cache contention workloads. (RHEL-141072) - Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018) - Fix race condition in io/tst-stat symlink test (RHEL-142209) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - Remove default value for LD_PROFILE_OUTPUT (RHEL-142196) - dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Avoid duplicate DNS query if search list contains '.' (RHEL-153056) - Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - Fix null pointer dereference and assertion failures in __nss_database_get (bug 28940) (RHEL-150269) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966) - CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules (RHEL-162901) - resolv: Correctly count records and check hostname validity (RHEL-168851, RHEL-168852) - Fix __nss_get_default_domain logic to restore netgroup user enumeration (RHEL-168096) - Fix incorrect setting of CXX variable in spec file (RHEL-148252) - Fix gconv module reference counter overflow in swscanf and swprintf families (RHEL-145156) - CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710) - CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340) - CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336, RHEL-185614) - iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279) - Update to 2.64.4 - Switch to meson build system - Tighten soname globs - Update to 2.64.5 - Add missing dep for generating links to libstdc++ docs - Fix gmmproc and generate_wrap_init.pl to be executable (#1917035) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.66.0 - Backport upstream fix for C++20 compatibility (#1947838) - Update generated header files for C++20 compatibility (#1947838) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.66.1 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1939372 - fixes bugs bz#1948547 - fixes bugs bz#1927235 - fixes bugs bz#1953901 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1939372 - fixes bugs bz#1948547 - fixes bugs bz#1927235 - fixes bugs bz#1953901 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1939372 - fixes bugs bz#1948547 - fixes bugs bz#1927235 - fixes bugs bz#1953901 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1939372 - fixes bugs bz#1948547 - fixes bugs bz#1927235 - fixes bugs bz#1953901 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1939372 - fixes bugs bz#1948547 - fixes bugs bz#1927235 - fixes bugs bz#1953901 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1939372 - fixes bugs bz#1948547 - fixes bugs bz#1927235 - fixes bugs bz#1953901 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1939372 - fixes bugs bz#1948547 - fixes bugs bz#1927235 - fixes bugs bz#1953901 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1939372 - fixes bugs bz#1948547 - fixes bugs bz#1927235 - fixes bugs bz#1953901 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for new freeglut. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with upstream to drop the glew dependency - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Move the .hmac files to the fipscheck subfolder - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location Resolves: rhbz#1980758 - Add the support for intel CET Resolves: rhbz#1977890 Fix: Integer overflow and resultant buffer overflow via crafted input Resolves: CVE-2021-43618 - Add SIMD optimization patches for s390x (provided by the IBM) Resolves: rhbz#2044216 - Fix: previous commit removed one function from the library and thus broke the ABI - function gmpn_preinv_divrem_1 should now not be removed Related: rhbz#2044216 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Move the .hmac files to the fipscheck subfolder - Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location Resolves: rhbz#1980758 - Add the support for intel CET Resolves: rhbz#1977890 Fix: Integer overflow and resultant buffer overflow via crafted input Resolves: CVE-2021-43618 - Add SIMD optimization patches for s390x (provided by the IBM) Resolves: rhbz#2044216 - Fix: previous commit removed one function from the library and thus broke the ABI - function gmpn_preinv_divrem_1 should now not be removed Related: rhbz#2044216 - Ship gnome-autoar-devel in CRB Resolves: RHEL-120219 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.92 - Update to 3.37.92.1 - Rebase move-adwaita-backgrounds.patch - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.rc - Make -extras subpackage require the main package - Drop move-adwaita-backgrounds.patch - Remove old obsoletes - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.92 - Update to 3.37.92.1 - Rebase move-adwaita-backgrounds.patch - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.rc - Make -extras subpackage require the main package - Drop move-adwaita-backgrounds.patch - Remove old obsoletes - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Update to 3.38.1 - Update to 3.38.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Drop old gcalctool obsoletes - Update to 40.rc - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 + gnome-characters-3.32.1-5 - Fix use of removed functions - Update to 3.34.0 - Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Remove the req for argyllcms as it is now orphaned - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 3.35.90 - Update to 3.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove BRs no longer required for building - Resolves: rhbz#1961187 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable Graphics Pipeline for RDP connections - Resolves: RHEL-57692 - Replace power-profiles-daemon requirement with tuned-ppd Resolves: RHEL-68152 - Don't disambiguate ethernet network devices names Related: RHEL-50729 - Don't accidentally set value of compose key when loading Keyboard settings Related: RHEL-4226 - Scale up monitors drawing in display arrangment settings when multiple monitors Related: RHEL-4196 - Handle gsm_sim virtual modems in Mobile Networks settings Resolves: RHEL-4193 - Allow launching subscription registration dialog directly Related: RHEL-4101 - Update zh_CN translations for Keyboard settings Related: RHEL-11909 - Fix crash with non-supported tuned-ppd profiles - Add translations to subscription manager interface Resolves: RHEL-4111 - Fix graphical artifact in Wacom calibration UI Resolves: RHEL-4088 - Replace power-profiles-daemon requirement with tuned-ppd Resolves: RHEL-68152 - Don't disambiguate ethernet network devices names Related: RHEL-50729 - Don't accidentally set value of compose key when loading Keyboard settings Related: RHEL-4226 - Scale up monitors drawing in display arrangment settings when multiple monitors Related: RHEL-4196 - Handle gsm_sim virtual modems in Mobile Networks settings Resolves: RHEL-4193 - Allow launching subscription registration dialog directly Related: RHEL-4101 - Update zh_CN translations for Keyboard settings Related: RHEL-11909 - Fix crash with non-supported tuned-ppd profiles - Add translations to subscription manager interface Resolves: RHEL-4111 - Fix graphical artifact in Wacom calibration UI Resolves: RHEL-4088 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.alpha.0 - Update to 40.beta - Update to 40.rc - Update to 40.0 + gnome-desktop3-40.0-2 - Re-add mistakenly removed debug utilities - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.alpha.0 - Update to 40.beta - Update to 40.rc - Update to 40.0 + gnome-desktop3-40.0-2 - Re-add mistakenly removed debug utilities - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.4 - Update to 3.38.0 - Update to 3.38.1 - Update to 3.38.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Update to 40.rc - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.3 (#1991429) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.2 - Update to 40.beta - Update upstream URL - Update to 40.rc - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.1 - Update to 40.2 (#1991430) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.37.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Update to 40.rc - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.34.0 - Rebuilt for libgnome-desktop soname bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Update upstream URLs - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add patch to fix the username validation Resolves: RHEL-70622 - Avoid SSH agent deadlocks (RHEL-25560) - Avoid SSH agent deadlocks (RHEL-25560) - Copy and run the script from XDG_RUNTIME_DIR Resolves: https://issues.redhat.com/browse/RHEL-25536 - search-app: Add systemd session files Resolves: https://issues.redhat.com/browse/RHEL-84004 - Add Xwayland and dbus-daemon as weak dependencies Resolves: https://issues.redhat.com/browse/RHEL-66572 - Copy and run the script from XDG_RUNTIME_DIR Resolves: https://issues.redhat.com/browse/RHEL-25536 - search-app: Add systemd session files Resolves: https://issues.redhat.com/browse/RHEL-84004 - Add Xwayland and dbus-daemon as weak dependencies Resolves: https://issues.redhat.com/browse/RHEL-66572 - Copy and run the script from XDG_RUNTIME_DIR Resolves: https://issues.redhat.com/browse/RHEL-25536 - search-app: Add systemd session files Resolves: https://issues.redhat.com/browse/RHEL-84004 - Add Xwayland and dbus-daemon as weak dependencies Resolves: https://issues.redhat.com/browse/RHEL-66572 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix shortcuts Resolves: #2062860 - Fix window resizing Resolves: #2035832 - Move things around a bit in the menus to be more logical Related: RHEL-32792 - Backport various kerberos fixes from upstream Resolves: #2177765 - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage) - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage) - backport upstream fix to use external browser for OAuth2 - Related: RHEL-10492 (Add margin around OAuth2 prompt content) - Resolves: RHEL-40831 (Use /etc/goa.conf to disable features for providers and whole providers) - Resolves: RHEL-34647 (goa-daemon: Mute "Unsupported account type ... (no provider)" error) - Backport various kerberos fixes from upstream Resolves: #2177765 - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage) - Resolves: RHEL-10492 (Move account types that depend on WebKitGTK into separate optional subpackage) - backport upstream fix to use external browser for OAuth2 - Related: RHEL-10492 (Add margin around OAuth2 prompt content) - Resolves: RHEL-40831 (Use /etc/goa.conf to disable features for providers and whole providers) - Resolves: RHEL-34647 (goa-daemon: Mute "Unsupported account type ... (no provider)" error) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 40.beta - Unbreak Flatpak builds on hosts without Tracker 3 - Update to 40.rc - The gnome-online-miners package won't be part of RHEL 9 - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add gcc to BuildRequires - Remove Facebook, Flickr and Google support Resolves: #1913641 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 40.beta - Unbreak Flatpak builds on hosts without Tracker 3 - Update to 40.rc - The gnome-online-miners package won't be part of RHEL 9 - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add gcc to BuildRequires - Remove Facebook, Flickr and Google support Resolves: #1913641 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump version number Related: rhbz#2188174 - Don't compile in SHA1 support again Resolves: #2223925 - Backport connection throttling Resolves: RHEL-92795 - Fix headless mode (#2078976) - Fix pasting into clipboard through CLI (RHEL-25179) - Add hard dependency on subscription-manager Resolves: #2175675 - Make subscription-manager dependency softer Related: RHEL-20449 - Silence noisy GL-check warnings Resolves: RHEL-88676 - Add race fixes needed when terminating a conflicting session on GDM greeter. Resolves: RHEL-92341 - Add hard dependency on subscription-manager Resolves: #2175675 - Make subscription-manager dependency softer Related: RHEL-20449 - Silence noisy GL-check warnings Resolves: RHEL-88676 - Add race fixes needed when terminating a conflicting session on GDM greeter. Resolves: RHEL-92341 - Add hard dependency on subscription-manager Resolves: #2175675 - Make subscription-manager dependency softer Related: RHEL-20449 - Silence noisy GL-check warnings Resolves: RHEL-88676 - Add race fixes needed when terminating a conflicting session on GDM greeter. Resolves: RHEL-92341 - Fix crashers in g-s-d and control-center related to making subscription-manager a soft dep Related: RHEL-20449 - Try to start rhsm if it's not already running Related: RHEL-20449 - Fix usb-protection crash when when screensaver service is unavailable Related: RHEL-19295 - Fix smartcards only working when cold-plugged Related: RHEL-47261 - Fix default power-button-action setting for servers Related: RHEL-71937 - Make "Register System" notification launch registration dialog directly Related: RHEL-4101 - Add build option to disable subman plugin Related: RHEL-4092 - Use mount path in "Low disk" notification when multiple mount points have same name Related: RHEL-11910 - Delay startup registration notification by 30 minutes Resolves: RHEL-4094 - Improve reliability of the startup registration notification Resolves: RHEL-4094 - Register session with GDM on startup Resolves: RHEL-129287 - Fix to automatically start fingerprint when enabled Resolves: RHEL-4166 - Register session with GDM on startup Resolves: RHEL-129287 - Fix to automatically start fingerprint when enabled Resolves: RHEL-4166 - Update fix of registering session Registering the display is needed too Resolves: RHEL-178703 - triggering a new build in correct target Resolves: RHEL-178703 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Update to 3.36.0 - Update to 3.37.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Build snapshot from current upstream - Update to 40.beta - Update to 40.rc - Fix logo flickering - Backport support for top positioning in RHEL Related: #2052594 - Adjust default values for RHEL Resolves: #2057150 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Fix another bug in window-list reordering backport Resolves: RHEL-22692 - Fix app grid with dash-to-panel extension Resolves: RHEL-69665 - Change "move-clock" to "move-notifications" Resolves: RHEL-33429 - Indicate urgency-hint in window-list Resolves: RHEL-73146 - Stop overriding gnome-shell's overview allocation Resolves: RHEL-70892 - Fix window-list styling Resolves: RHEL-95787 - Make workspace names more prominent Resolves: RHEL-96218 - Fix loading custom CSS Resolves: RHEL-126240 - Fix applying num-workspaces setting Resolves: RHEL-129101 - Fix workspace indicator cleanups Resolves: RHEL-129395 - Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file) - Resolves: #2129021 (Hide some errors in non-debug builds) - Resolves: #2228374 (Rebuild to move gnome-software-devel into CRB) - Resolves: RHEL-843 (Rebase GNOME Software to its GNOME 45 version) - Resolves: RHEL-22268 (Prefer VENDOR_NAME in app origin) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Backport an upstream patch to fix out-of-bounds error when opening resources tab (MR #38) - Update to 40.rc - Remove unused polkit BuildRequires, update URL - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.1 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix help overlay shortcut (#2073741) - Fix crash when changing data points (#2062802) - Update to 3.36.2 - Rebase the patches - Update to 3.37.90 - Rebase the patches - Update to 3.38.0 - Rebase the patches - Backport yet-to-be-released patches from upstream - Update to 3.38.1 - Backport yet-to-be-released patches from upstream - Fix crash when the command line is shorter than 1024 characters - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.40.1 - Rebase the patches - Backport yet-to-be-released patches from upstream to avoid translation conflicts Resolves: #1959384 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.40.3 (#1998957) - Update to 3.36.2 - Rebase the patches - Update to 3.37.90 - Rebase the patches - Update to 3.38.0 - Rebase the patches - Backport yet-to-be-released patches from upstream - Update to 3.38.1 - Backport yet-to-be-released patches from upstream - Fix crash when the command line is shorter than 1024 characters - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 3.40.1 - Rebase the patches - Backport yet-to-be-released patches from upstream to avoid translation conflicts Resolves: #1959384 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.40.3 (#1998957) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make adwaita-gtk2-theme recommends conditional on gtk2 being installed - Split highcontrast-icon-theme out to a new subpackage - Explicitly require cursor and icon themes required for the gtk2 themes - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New welcome image for Fedora branding (thanks, jimmac!) - Obsolete gnome-getting-started-docs - Obsolete all language-specific gnome-getting-started-docs subpackages - Update the fedora logo in welcome image (#1940041) - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add missing obsoletes for gnome-getting-started-docs-hu (#1954117) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix default focus Related: rhbz#2055735 - Update Japanese translation - Resolves: rhbz#2082188 - Require libhandy1 instead of libhandy - Use same pre-release system as in other GNOME packages - Require gnome-themes-extra for gtk3 css files - Update to 40.0 - Use upstream appdata screenshots - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1973391 (Backport downstream patch from older RHEL) - Resolves: #1973391 (Remove the patch, not applicable due to Nautilus changes) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2063688 (Update to 40.10 release) - Update to 3.37.92 - Update to 3.38.0 - Update to 3.38.1 - Update to 3.38.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Update to 40.rc - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2025-68973 (gpg.fail/memcpy) - Bump release to ensure el9 package is greater than el9_* packages - Bump release to ensure el9 package is greater than el9_* packages - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump nettle dependency to 3.10.1 (RHEL-52740) - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump nettle dependency to 3.10.1 (RHEL-52740) - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Use full hash+sign operations in pct_test (RHEL-172270) - Fix order of previous changelog entries (RHEL-172270) - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Rebuild to target RHEL-9.8 - Bump release to ensure el9 package is greater than el9_* packages - Bump release to ensure el9 package is greater than el9_* packages - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump nettle dependency to 3.10.1 (RHEL-52740) - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump nettle dependency to 3.10.1 (RHEL-52740) - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Use full hash+sign operations in pct_test (RHEL-172270) - Fix order of previous changelog entries (RHEL-172270) - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Rebuild to target RHEL-9.8 - Bump release to ensure el9 package is greater than el9_* packages - Bump release to ensure el9 package is greater than el9_* packages - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump nettle dependency to 3.10.1 (RHEL-52740) - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump nettle dependency to 3.10.1 (RHEL-52740) - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Use full hash+sign operations in pct_test (RHEL-172270) - Fix order of previous changelog entries (RHEL-172270) - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Rebuild to target RHEL-9.8 - Bump release to ensure el9 package is greater than el9_* packages - Bump release to ensure el9 package is greater than el9_* packages - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump nettle dependency to 3.10.1 (RHEL-52740) - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Backport the fix for CVE-2024-12243 (RHEL-78580) - Bump nettle dependency to 3.10.1 (RHEL-52740) - Fix CVE-2025-32988, CVE-2025-32989, CVE-2025-32990, and CVE-2025-6395 - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Add missing changelog entry - key_update: rework the rekeying logic (RHEL-107499) - Rebase to 3.8.10 - Revert defaulting to PBMAC1 in FIPS mode - Revert unapproving 1024-, 1280-, 1536- and 1792-bit RSA verification - Reinstate and update the prematurely dropped rekeying patch - Fix PKCS#11 token initialization label overflow (CVE-2025-9820) - Fix name constraint processing performance issue (CVE-2025-14831) - Fix CVE-2026-33846 (DTLS fragment reassembly, High, heap overwrite) - Fix CVE-2026-42009 (DTLS fragment reassembly, High, undefined behaviour) - Fix CVE-2026-33845 (DTLS fragment reassembly, High, heap overread) - Fix CVE-2026-42010 (PSK authentication, High, authentication bypass) - Fix CVE-2026-3833 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42011 (Name constraints, Medium, name constraint bypass) - Fix CVE-2026-42012 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42013 (CN fallback, Medium, certificate misuse) - Fix CVE-2026-42014 (PKCS#11 PIN change, Medium, use-after-free) - Fix CVE-2026-5260 (PKCS#11 RSA, Medium, heap overread) - Fix CVE-2026-42015 (PKCS#12 appending, Low, heap overwrite) - Fix CVE-2026-3832 (OCSP, Low, revocation bypass) - Fix CVE-2026-5419 (PKCS#7, Low, timing side-channel) - Fix upstream security issue #1808 (PSK rehandshake) - Fix upstream security issue #1810 (EKU OID prefix match) - Fix upstream security issue #1813 (pkcs11-provider persistent keys) - Fix upstream security issue #1818 (RSA correctness, OpenSSL format import) - Fix upstream security issue #1819 (PKCS#11 trust removal error path) - Fix upstream security issue #1822 (SCT extension parser OOB read) - Fix upstream security issue #1841 (key zeroization in hybrid kex) - Fix upstream security issue #1823 (malformed certtool template) - Fix upstream security issue #1817 (session parameter loading robustness) - Fix upstream security issue #1820 (PKCS#11 KDF succeeding w/o deriving) - gnutls-3.8.10-CVE-2025-9820.patch: update Makefile.in - Use full hash+sign operations in pct_test (RHEL-172270) - Fix order of previous changelog entries (RHEL-172270) - fips: Allow SigVer only with RSA keys with modulus >= 2048 bits - Rebuild to target RHEL-9.8 - Fix typo in add-gobuild-and-gotest.patch - Resolves: RHEL-7437 - Enable debuginfo package - Resolves: RHEL-52226 - Make golist non optional - Resolves: RHEL-52226 - Add back again ExclusiveArch, it was removed by mistake. - Resolves: RHEL-52226 - Revert go-rpm-templates to noarch - Resolves: RHEL-67300 - Related: RHEL-52226 - Add full golist implementation - Resolves: RHEL-7366 - Add patches back again - Resolves: RHEL-86067 - Related: RHEL-7366 - Fix malformed patch macros - Related: RHEL-86067 - Related: RHEL-7366 - Bump release for el9 to avoid clash with el9_6 build - Related: RHEL-86067 - Related: RHEL-7366 - Update to 3.8.1 - Changed the forgeurl to gitlab - Resolves: RHEL-112845 - Fix typo in add-gobuild-and-gotest.patch - Resolves: RHEL-7437 - Enable debuginfo package - Resolves: RHEL-52226 - Make golist non optional - Resolves: RHEL-52226 - Add back again ExclusiveArch, it was removed by mistake. - Resolves: RHEL-52226 - Revert go-rpm-templates to noarch - Resolves: RHEL-67300 - Related: RHEL-52226 - Add full golist implementation - Resolves: RHEL-7366 - Add patches back again - Resolves: RHEL-86067 - Related: RHEL-7366 - Fix malformed patch macros - Related: RHEL-86067 - Related: RHEL-7366 - Bump release for el9 to avoid clash with el9_6 build - Related: RHEL-86067 - Related: RHEL-7366 - Update to 3.8.1 - Changed the forgeurl to gitlab - Resolves: RHEL-112845 - Fix typo in add-gobuild-and-gotest.patch - Resolves: RHEL-7437 - Enable debuginfo package - Resolves: RHEL-52226 - Make golist non optional - Resolves: RHEL-52226 - Add back again ExclusiveArch, it was removed by mistake. - Resolves: RHEL-52226 - Revert go-rpm-templates to noarch - Resolves: RHEL-67300 - Related: RHEL-52226 - Add full golist implementation - Resolves: RHEL-7366 - Add patches back again - Resolves: RHEL-86067 - Related: RHEL-7366 - Fix malformed patch macros - Related: RHEL-86067 - Related: RHEL-7366 - Bump release for el9 to avoid clash with el9_6 build - Related: RHEL-86067 - Related: RHEL-7366 - Update to 3.8.1 - Changed the forgeurl to gitlab - Resolves: RHEL-112845 - Fix typo in add-gobuild-and-gotest.patch - Resolves: RHEL-7437 - Enable debuginfo package - Resolves: RHEL-52226 - Make golist non optional - Resolves: RHEL-52226 - Add back again ExclusiveArch, it was removed by mistake. - Resolves: RHEL-52226 - Revert go-rpm-templates to noarch - Resolves: RHEL-67300 - Related: RHEL-52226 - Add full golist implementation - Resolves: RHEL-7366 - Add patches back again - Resolves: RHEL-86067 - Related: RHEL-7366 - Fix malformed patch macros - Related: RHEL-86067 - Related: RHEL-7366 - Bump release for el9 to avoid clash with el9_6 build - Related: RHEL-86067 - Related: RHEL-7366 - Update to 3.8.1 - Changed the forgeurl to gitlab - Resolves: RHEL-112845 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Update to Go 1.24.6 (fips-1) - Resolves: RHEL-106461 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.25.0 - Set GOAMD64 to v2 to align with new architecture baselines - Modify the modify_go.env.patch to reflect GOAMD64 baseline version change to v2 - Resolves: RHEL-109557 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Revert DWARF5 defaults - Add elf5 to rpminspect.yaml - Related: RHEL-109557 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.25.1 - Resolves: RHEL-116850 - Update to Go 1.25.3 - Resolves: RHEL-121220 - Cleanup lib/ ownership - Update to Go 1.25.5 (fips-1) - Resolves: RHEL-139364 - Update to Go 1.25.7 (fips-1) - Resolves: RHEL-146452 - Update to Go 1.26.1 - Resolves: RHEL-153434 - Update to Go 1.26.2 (fips-2) - Resolves: RHEL-169929 - Update to Go 1.26.3 (fips-1) - Resolves: RHEL-175607 - Update to Go 1.26.4 (fips-1) - Resolves: RHEL-183349 - Update to Go 1.26.5 (fips-1) - Resolves: RHEL-193475 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Convert to new fonts packaging guidelines - Update fontconfig DTD id in conf file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Un-retire this package in F38+ (#2162532) - Update as per suggestions given in rename package review (#2166813) - 20200215-3 ✅ Lint, lint, lint and lint again - 20200215-4 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-5 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-6 🐞 Workaround Fedora problems created by rpm commit 93604e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20200215-8 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add OFL to License tag for DroidSansDevanagari font. Resolves: rhbz#1972027 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 20200215-3 ✅ Lint, lint, lint and lint again - 20200215-4 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-5 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-6 🐞 Workaround Fedora problems created by rpm commit 93604e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20200215-8 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add OFL to License tag for DroidSansDevanagari font. Resolves: rhbz#1972027 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 20200215-3 ✅ Lint, lint, lint and lint again - 20200215-4 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-5 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20200215-6 🐞 Workaround Fedora problems created by rpm commit 93604e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20200215-8 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add OFL to License tag for DroidSansDevanagari font. Resolves: rhbz#1972027 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Build with Jurand instead of deprecated javapackages-extra - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Drop unneeded Obsoletes - Update javapackages test plan to f42 - Update Noto CJK to Sans 2.004 and Serif 2.002 - Drop some Noto CJK Language Specific OTFs sub packages - Resolves: RHEL-13738 - Add google-noto-sans-cjk-jp-fonts back - Resolves: RHEL-13738 - Update to upstream snapshot tarball (Unicode 13.1.0 support) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to v2.034 - Resolves: #2118299 - Update to upstream snapshot tarball (Unicode 13.1.0 support) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to v2.034 - Resolves: #2118299 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Update Noto CJK to Sans 2.004 and Serif 2.002 - Drop some Noto CJK Language Specific OTFs sub packages - Resolves: RHEL-13738 - Add google-noto-sans-cjk-jp-fonts back - Resolves: RHEL-13738 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Update Noto CJK to Sans 2.004 and Serif 2.002 - Drop some Noto CJK Language Specific OTFs sub packages - Resolves: RHEL-13738 - Add google-noto-sans-cjk-jp-fonts back - Resolves: RHEL-13738 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt to ship missing subpackages to CRB. Resolves: RHEL-56333 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Convert to new fonts packaging guidelines - Update fontconfig DTD id in conf file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix license and covscan issues Resolves: #1938732 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild Resolves: #2035319 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add upstream commits for git master which contains patches 9, 10 and 11 - Add GCC10 fix - Cleanups - Better comments in spec file - Two patches have been upstreamed - Do not run gpm in the container (#1524034) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix License tag - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Review covscan issues Resolves: #1938733 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add upstream commits for git master which contains patches 9, 10 and 11 - Add GCC10 fix - Cleanups - Better comments in spec file - Two patches have been upstreamed - Do not run gpm in the container (#1524034) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix License tag - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Review covscan issues Resolves: #1938733 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add upstream commits for git master which contains patches 9, 10 and 11 - Add GCC10 fix - Cleanups - Better comments in spec file - Two patches have been upstreamed - Do not run gpm in the container (#1524034) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix License tag - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Review covscan issues Resolves: #1938733 - update to 3.26.1 (RHEL-90132) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - update to 3.26.1 (RHEL-90132) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - fix command injection in gpsprof (CVE-2026-58459) - update to 3.26.1 (RHEL-90132) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - update to 3.26.1 (RHEL-90132) - fix buffer overflow in NMEA2000 driver (CVE-2025-67268) - fix integer underflow in handling of Navcom packets (CVE-2025-67269) - fix command injection in gpsprof (CVE-2026-58459) - Resolves RHEL-75919: grafana selinux issue with autofs_t - Resolves RHEL-84636: CVE-2025-30204 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-156658: CVE-2026-25679 - Resolves RHEL-161804: CVE-2026-27877 - Resolves RHEL-166346: CVE-2026-33810 - Resolves RHEL-166703: CVE-2026-32282 - Resolves RHEL-167390: CVE-2026-32280 - Resolves RHEL-167696: CVE-2026-32283 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - fix(web/bind): cap the request body size and validate public dashboard access Backport of upstream grafana/grafana commit 82ef1399 (PR #125789), VUL-2026-0074 / VUL-2026-0077. Fixes CVE-2026-42127. - Resolves RHEL-84636: CVE-2025-30204 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - fix CVE-2024-1394 - bump release number - Add a premade uwsgi dashboard for the vector datasource - Resolves: RHEL-57931 - Resolves RHEL-89310: CVE-2025-22871 - Resolves RHEL-140550: CVE-2025-61729 - Resolves RHEL-146104: CVE-2025-61726 - Resolves RHEL-149640: CVE-2025-68121 - Resolves RHEL-156659: CVE-2026-25679 - Resolves RHEL-166347: CVE-2026-33810 - Resolves RHEL-166704: CVE-2026-32282 - Resolves RHEL-167391: CVE-2026-32280 - Resolves RHEL-167697: CVE-2026-32283 - Add a premade uwsgi dashboard for the vector datasource - Resolves: RHEL-57931 - Resolves RHEL-89310: CVE-2025-22871 - Resolves RHEL-140550: CVE-2025-61729 - Resolves RHEL-146104: CVE-2025-61726 - Resolves RHEL-149640: CVE-2025-68121 - Resolves RHEL-158769: CVE-2026-25679 - Resolves RHEL-166679: CVE-2026-32282 - Resolves RHEL-167679: CVE-2026-32283 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-183820: CVE-2026-39821 - Resolves RHEL-188285 - Resolves RHEL-75919: grafana selinux issue with autofs_t - Resolves RHEL-84636: CVE-2025-30204 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-156658: CVE-2026-25679 - Resolves RHEL-161804: CVE-2026-27877 - Resolves RHEL-166346: CVE-2026-33810 - Resolves RHEL-166703: CVE-2026-32282 - Resolves RHEL-167390: CVE-2026-32280 - Resolves RHEL-167696: CVE-2026-32283 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - fix(web/bind): cap the request body size and validate public dashboard access Backport of upstream grafana/grafana commit 82ef1399 (PR #125789), VUL-2026-0074 / VUL-2026-0077. Fixes CVE-2026-42127. - Resolves RHEL-84636: CVE-2025-30204 - Resolves RHEL-85419: Move grafana home directory to /var/lib/grafana - Resolves RHEL-89953: CVE-2025-4123 - Resolves RHEL-97518: Rework grafana-selinux spec file sections - Resolves RHEL-87861: Add additional SELinux rules for grafana-selinux package to allow LDAP connections - Resolves RHEL-125696: CVE-2025-58183 - Resolves RHEL-132757: Grafana-selinux prevents plugins from searching cgroups - Resolves RHEL-140549: CVE-2025-61729 - Resolves RHEL-144960: CVE-2026-21721 - Resolves RHEL-145419: CVE-2025-61728 - Resolves RHEL-146103: CVE-2025-61726 - Resolves RHEL-149639: CVE-2025-68121 - Resolves RHEL-158767: CVE-2026-25679 - Resolves RHEL-161803: CVE-2026-27877 - Resolves RHEL-166678: CVE-2026-32282 - Resolves RHEL-167678: CVE-2026-32283 - Resolves RHEL-183803: CVE-2026-39821 - Resolves RHEL-188280 - Disable LTO for now - Re-enable LTO as upstream GCC target/96939 has been fixed - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.10.4 - Disable neon for graphene on armv7hl - Add meson_test - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild with newer gobject-introspection to fix multilib conflict - Related: rhbz#1915340 - Fix ray intersection bug causing picking errors in mutter Resolves: #1956294 - Update to 1.10.6 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable LTO for now - Re-enable LTO as upstream GCC target/96939 has been fixed - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.10.4 - Disable neon for graphene on armv7hl - Add meson_test - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild with newer gobject-introspection to fix multilib conflict - Related: rhbz#1915340 - Fix ray intersection bug causing picking errors in mutter Resolves: #1956294 - Update to 1.10.6 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 1.3.14. - Add missing build dependencies for building the manual with TeXLive 2020. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Adapt to new cmake macros. - Stop building the HTML manual, texlive is breaking things too frequently. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 1.3.14. - Add missing build dependencies for building the manual with TeXLive 2020. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Adapt to new cmake macros. - Stop building the HTML manual, texlive is breaking things too frequently. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Fixed gvpack to run Resolves: rhbz#2029565 - Rebuilt for graphviz-ruby addition Resolves: RHEL-17134 - Update to version 1.22.4 resolves: #1808072 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - Move pdfpic.tmac to groff-base resolves: #1888370 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add psutils as a runtime dependency (needed for groff -Thtml) - Make psutils a weak dependency - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix several important Covscan defects resolves: #1938735 - Add an option to enable restart/shutdown at lockscreen Resolves: RHEL-103998 - Add an option to disable showing password entry at login/lockscreen Resolves: RHEL-123140 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt with no changes to get the -devel package to CRB. Resolves: rhbz#2035401 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt with no changes to get the -devel package to CRB. Resolves: rhbz#2035401 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New version Resolves: rhbz#1818181 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.8.2 - Update to 1.8.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.8.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1.22.6 - 1.22.7 - Set cap information correctly - Resolves: rhbz#2238703 - 1.22.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.22.9 - Update to 1.22.12 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - 1.22.6 - 1.22.7 - Set cap information correctly - Resolves: rhbz#2238703 - 1.22.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.22.9 - Update to 1.22.12 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Fix ADPCM decoder negotiation and input size check (CVE-2026-19387) Resolves: RHEL-235496 - Rebuild for z-stream Resolves: RHEL-156256, RHEL-156259 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - fix for CVE-2025-3887 Resolves: RHEL-93059 - Fix for CVE-2026-52720: validate framebuffer update rectangles in librfb plugin Resolves: RHEL-184459 - Fix integer overflows in vmnc decoder (CVE-2026-52722) Resolves: RHEL-184422 - Fix for CVE-2026-52719: vajpegdecoder out-of-bounds read Resolves: RHEL-184403 - Fix bytes/bits confusion in AV1 tile data size parsing (CVE-2026-52718) Resolves: RHEL-184388 - Sync with c9s release -5..-7: fix for CVE-2026-2923, CVE-2026-3082 in dvbsuboverlay and jpegparser Resolves: RHEL-156242, RHEL-156255 - Fix buffer overflow in DTLS connection peer certificate subject DN handling (CVE-2026-59692) Resolves: RHEL-193572 - Fix incorrect bytes-per-pixel handling in rfbsrc plugin (CVE-2026-59691) Resolves: RHEL-193557 - Fix ADPCM decoder negotiation and input size check (CVE-2026-19387) Resolves: RHEL-235496 - Rebuild for z-stream Resolves: RHEL-156256, RHEL-156259 - Rebuild to fix missing binaries due to buildsystem oversight - Disable libvisual in RHEL builds - Update to 1.22.12 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 - Apply patch for CVE-2026-2921 Resolves: RHEL-156249 - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild again -7 was build in wrong target - Disable libvisual in RHEL builds - Update to 1.22.12 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 - Apply patch for CVE-2026-2921 Resolves: RHEL-156249 - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild again -7 was build in wrong target - Disable libvisual in RHEL builds - Update to 1.22.12 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Bump version - Apply patches for CVE-2024-47538, CVE-2024-47541, CVE-2024-47542, CVE-2024-47600, CVE-2024-47607, CVE-2024-47615, CVE-2024-47835 Resolves: RHEL-70983, RHEL-71035, RHEL-70932, RHEL-71037 Resolves: RHEL-71019, RHEL-70995, RHEL-71163 - Apply patch for CVE-2026-2921 Resolves: RHEL-156249 - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild again -7 was build in wrong target - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata parsing in avidemux to prevent unsigned integer underflow Resolves: RHEL-239060 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 - Revert back to 1.22.9 (accidentally merged Rawhide to f40) - 1.22.11 - Qt6 re-rebuild - 1.22.12 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156272, RHEL-156273 - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156267, RHEL-156266 - Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s (this branch had regressed to a stale pre-1.22.12 base) Resolves: RHEL-156269, RHEL-156270 - Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied on top of the correct 1.22.12 base Resolves: RHEL-184477 - Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265 depayloaders to prevent excessive memory usage Resolves: RHEL-224162 - Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata parsing in avidemux to prevent unsigned integer underflow Resolves: RHEL-239060 - Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling Resolves: RHEL-239042 - Revert back to 1.22.9 (accidentally merged Rawhide to f40) - 1.22.11 - Qt6 re-rebuild - 1.22.12 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540 CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546, CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599, CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606, CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776, CVE-2024-47777, CVE-2024-47778, CVE-2024-47834 - Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195 - Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200 - Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204 - Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039 - Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167 - Resolves: RHEL-71189 - Apply patches for CVE-2026-3083, CVE-2026-3085 Resolves: RHEL-156272, RHEL-156273 - Rebuild for z-stream Resolves: RHEL-156272, RHEL-156273 - Rebuild to fix missing binaries due to buildsystem oversight - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Add patch for CVE-2026-2920, CVE-2026-2922 Resolves: RHEL-156061, RHEL-156274 - Rebuild for z-stream - Resolves: RHEL-156061, RHEL-156274 - Rebuild to fix missing binaries due to buildsystem oversight - Fix CVE-2026-53704: multiple rmdemux security issues - Resolves: RHEL-184464 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Add patch for CVE-2026-2920, CVE-2026-2922 Resolves: RHEL-156061, RHEL-156274 - Rebuild for z-stream - Resolves: RHEL-156061, RHEL-156274 - Rebuild to fix missing binaries due to buildsystem oversight - Fix CVE-2026-53704: multiple rmdemux security issues - Resolves: RHEL-184464 - Fix integer overflows during bounds checks in asfdemux - Resolves: RHEL-235519 - Update to 1.22.5 - 1.22.7 - 1.22.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - 1.22.9 - 1.22.11 - 1.22.12 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Rebuild - Resolves: RHEL-38511, RHEL-41157 - Reduce the height of window titlebars - Actually reduce the height of window titlebars - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4098 - Rebuild to trigger shipping devel package (RHEL-19019) - Recommend adwaita-gtk2-theme (#2051573) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Recommend adwaita-gtk2-theme (#2051573) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Recommend adwaita-gtk2-theme (#2051573) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Recommend adwaita-gtk2-theme (#2051573) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Recommend adwaita-gtk2-theme (#2051573) - Recommend ibus-gtk2 when ibus is installed (#2066314) - Reduce the height of window titlebars - Actually reduce the height of window titlebars - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4098 - Reduce the height of window titlebars - Actually reduce the height of window titlebars - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4098 - Reduce the height of window titlebars - Actually reduce the height of window titlebars - Stop looking for modules in cwd (CVE-2024-6655) - Resolves: RHEL-46993 - Resolves: RHEL-4130 - Resolves: RHEL-22853 - Resolves: RHEL-4098 - Dummy commit to get ci to rerun - Related: RHEL-4098 - Resolves: RHEL-4098 - Ensure Wayland gets the Wayland IM context Resolves: #2087031 - Update to 4.12.3 Resolves: RHEL-842 - Do not try to implement color glyphs without Pango help Resolves: RHEL-842 - Ensure Wayland gets the Wayland IM context Resolves: #2087031 - Update to 4.12.3 Resolves: RHEL-842 - Do not try to implement color glyphs without Pango help Resolves: RHEL-842 - Update to 3.24.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Opt-out of LTO (#1898054) - Update to 3.24.3 - Use https source URLs - Re-enable LTO now that we have upstream fix in place (#1898054) - Switch to meson build system - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.24.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.24.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 4.8.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix decrement number feature Resolves: #2062786 - Add build and test suite fix for single core VMs Related: #2062786 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-Requires on java - Update to upstream version 32.1.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Update to upstream version 33.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 33.3.0 - Update javapackages test plan to f42 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to guestfs-tools 1.51.6 - Implement --key all:... resolves: RHEL-19030 - Fix crash because of off-by-one error resolves: RHEL-19062 - Fix virt-customize --chown invalid format resolves: RHEL-21899 - Add support for nbd+unix:// URIs resolves: RHEL-33956 - customize: Implement --inject-blnsvr operation resolves: RHEL-36634 - Reboot Windows between each firstboot script to improve reliability resolves: RHEL-55759 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56811 - Replace Jansson with json-c resolves: RHEL-65294 - Fix virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-80214 - mlcustomize: Remove dnf --verbose option resolves: RHEL-83200 - builder: Update link to templates to use https resolves: RHEL-94874 - Update guestfs-tools firstboot.bat to match virt-v2v resolves: RHEL-109521 - Enable building for ppc64le - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix warning building with clang - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices - make is no longer in buildroot by default - 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs - 5.3.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix warning building with clang - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices - make is no longer in buildroot by default - 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs - 5.3.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix warning building with clang - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices - make is no longer in buildroot by default - 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs - 5.3.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix warning building with clang - non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type] - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices - make is no longer in buildroot by default - 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs - 5.3.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add support for x-gvfs-trash mount option (RHEL-52353) - Add edit mode support for smb backend (RHEL-71088) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - Add support for x-gvfs-trash mount option (RHEL-52353) - Add edit mode support for smb backend (RHEL-71088) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - Add support for x-gvfs-trash mount option (RHEL-52353) - Add edit mode support for smb backend (RHEL-71088) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - Add support for x-gvfs-trash mount option (RHEL-52353) - Add edit mode support for smb backend (RHEL-71088) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - Add support for x-gvfs-trash mount option (RHEL-52353) - Add edit mode support for smb backend (RHEL-71088) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - Add support for x-gvfs-trash mount option (RHEL-52353) - Add edit mode support for smb backend (RHEL-71088) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - Add support for x-gvfs-trash mount option (RHEL-52353) - Add edit mode support for smb backend (RHEL-71088) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - Add support for x-gvfs-trash mount option (RHEL-52353) - Add edit mode support for smb backend (RHEL-71088) - udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934) - udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934) - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5 - Related: RHEL-27608 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1 - Resolves: RHEL-69761 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4 - Resolves: RHEL-83036 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80816 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6 - Related: RHEL-80816 - rebuild for CVE-2025-22871 - Resolves: RHEL-90035 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7 - Resolves: RHEL-112184 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.7.5 - Related: RHEL-27608 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.0 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.1 - Resolves: RHEL-69761 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.2 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.3 - Related: RHEL-60277 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.4 - Resolves: RHEL-83036 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.5 - Related: RHEL-80816 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.6 - Related: RHEL-80816 - rebuild for CVE-2025-22871 - Resolves: RHEL-90035 - update to https://github.com/containers/gvisor-tap-vsock/releases/tag/v0.8.7 - Resolves: RHEL-112184 - Rebuild to trigger shipping devel package (RHEL-19019) - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Reject any empty content-length header value (CVE-2023-40225, RHEL-7736) - Reject "#" as part of URI path component (CVE-2023-45539, RHEL-18169) - Always clear retry flags in read/write functions to avoid CPU usage spikes - Fix "unable to load certificate chain from file" issue Resolves: RHEL-71925, RHEL-68780 - Rebase to 2.8.14 Resolves: RHEL-74039 - Add tmpfiles.d file to make systemd-tmpfiles create/set correct ownership/permissions of /var/lib/haproxy Resolves: RHEL-120178 - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126665 - Always clear retry flags in read/write functions to avoid CPU usage spikes - Fix "unable to load certificate chain from file" issue Resolves: RHEL-71925, RHEL-68780 - Rebase to 2.8.14 Resolves: RHEL-74039 - Add tmpfiles.d file to make systemd-tmpfiles create/set correct ownership/permissions of /var/lib/haproxy Resolves: RHEL-120178 - Fix denial of service vulnerability in mjson library (CVE-2025-11230) Resolves: RHEL-126665 - Fix uint16_t overflow in FCGI demux record length (CVE-2026-55203) Resolves: RHEL-211062 - Fix NULL pointer dereference in hpack_dht_insert() (CVE-2026-55204) Resolves: RHEL-211082 - Resolves:rh#2103849 CVE-2022-33068 harfbuzz: integer overflow in the component hb-ot-shape-fallback.c - Resolves:rh#2103849 CVE-2022-33068 - Fix Covscan compiler warning for inclusion of parenthesis - Update tests.yaml - Resolves:rh#2103849 - Update tests.yaml - Resolves:RHEL-2268 CVE-2023-25193 - Resolves:RHEL-2268 Fix CI tests results - Resolves:rh#2103849 CVE-2022-33068 harfbuzz: integer overflow in the component hb-ot-shape-fallback.c - Resolves:rh#2103849 CVE-2022-33068 - Fix Covscan compiler warning for inclusion of parenthesis - Update tests.yaml - Resolves:rh#2103849 - Update tests.yaml - Resolves:RHEL-2268 CVE-2023-25193 - Resolves:RHEL-2268 Fix CI tests results - Resolves:rh#2103849 CVE-2022-33068 harfbuzz: integer overflow in the component hb-ot-shape-fallback.c - Resolves:rh#2103849 CVE-2022-33068 - Fix Covscan compiler warning for inclusion of parenthesis - Update tests.yaml - Resolves:rh#2103849 - Update tests.yaml - Resolves:RHEL-2268 CVE-2023-25193 - Resolves:RHEL-2268 Fix CI tests results - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Nwe upstream version 1.5 - Add patch to solve inconsistency between configure.ac and filename - Add Build requirement autoconf - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream version 1.6 resolves: rhbz#2081103 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Own Hi-DPI directories Resolves: #2090173 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make adwaita-gtk2-theme recommends conditional on gtk2 being installed - Split highcontrast-icon-theme out to a new subpackage - Explicitly require cursor and icon themes required for the gtk2 themes - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.54 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 3.56 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.57 - Update to 3.60 - Rebuilt for make macro change - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to Fedora Rawhide resolves: RHEL-56803 - Rebase to Fedora Rawhide resolves: RHEL-56803 - Update to version 2.11 - Enable CONFIG_IEEE80211BE Resolves: RHEL-58726 - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly - remove the old search algorithm - get out of hp-setup if the device is a standalone scanner - 1929977 - hplip-3.21.2 is available - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1969767 - remove redundant files - add hplip-repack.sh as a source - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add AlmaLinux support - fix permission for custom created gpg dir - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - OSH fixes after CVE-2026-8631 - Fix more leaks in hpcups - Аdd AlmaLinux support - Fix permission for custom created gpg dir - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - OSH fixes after CVE-2026-8631 - Fix more leaks in hpcups - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Аdd AlmaLinux support - Fix permission for custom created gpg dir - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly - remove the old search algorithm - get out of hp-setup if the device is a standalone scanner - 1929977 - hplip-3.21.2 is available - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1969767 - remove redundant files - add hplip-repack.sh as a source - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add AlmaLinux support - fix permission for custom created gpg dir - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - OSH fixes after CVE-2026-8631 - Fix more leaks in hpcups - Аdd AlmaLinux support - Fix permission for custom created gpg dir - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - OSH fixes after CVE-2026-8631 - Fix more leaks in hpcups - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Аdd AlmaLinux support - Fix permission for custom created gpg dir - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly - remove the old search algorithm - get out of hp-setup if the device is a standalone scanner - 1929977 - hplip-3.21.2 is available - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1969767 - remove redundant files - add hplip-repack.sh as a source - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add AlmaLinux support - fix permission for custom created gpg dir - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - OSH fixes after CVE-2026-8631 - Fix more leaks in hpcups - Аdd AlmaLinux support - Fix permission for custom created gpg dir - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - OSH fixes after CVE-2026-8631 - Fix more leaks in hpcups - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Аdd AlmaLinux support - Fix permission for custom created gpg dir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Include patch to work with colon but no port - Update to 2.9.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Update to upstream version 4.5.14 - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Port to Mockito 5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Port to Mockito 5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Port to OpenJDK 21 - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Disable tests failing without networking - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: rhbz#1771027 CVE-2019-16707 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Accomodate Nuspell by putting the dictionary dir in its own subpackage. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1951295 FTBFS in Red Hat Enterprise Linux 9 CentOS Stream - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1771027 CVE-2019-16707 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Accomodate Nuspell by putting the dictionary dir in its own subpackage. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to latest version - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1967646 - Correct the License: tag to LGPLv3+ based on LICENSE.txt file - Added gating tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1771027 CVE-2019-16707 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Accomodate Nuspell by putting the dictionary dir in its own subpackage. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1967951 - Correct the license to GPLv3+ as given in README-fy.txt - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add perl dependencies needed for build - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961995 - Add gating tests from rhel-8 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Remove the duplicate source file committed to this package git repository - Update URL tag and files section to be more verbose - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Resolves: rhbz#1912135 latest version - bump n-v-r - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1951294 FTBFS in Red Hat Enterprise Linux 9 CentOS Stream - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1951293 FTBFS in Red Hat Enterprise Linux 9 CentOS Stream - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - linux: fix support for NUMA node0 being offline (RHEL-118677) - Resolves: RHEL-118677 - linux: fix support for NUMA node0 being offline (RHEL-118677) - Resolves: RHEL-118677 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1962003 - Add gating tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1969454 - Update to working Source link - License updated to MIT - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - fix dangling links - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1962003 - Add gating tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to upstream release v51.0 - Resolves: RHEL-24473, RHEL-23180 - Rebase to upstream release v54.0 - Resolves: RHEL-52886, RHEL-54647, RHEL-51876 - Fix data corruption in bnxt_re - Resolves: RHEL-89179 - Rebase to upstream release v57.0 - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449 - Fix pyverbs tests - Resolves: RHEL-107929, RHEL-107930 - Rebase to upstream release v60.0 - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v61.0 - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebuilt for gating testing - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Distinguish Super-space and space shortcut keys. Related: RHEL-24804 - Bump for el9_4. Related: RHEL-24804 - Fix CI. Related: RHEL-24804 - Distinguish Super-space and space shortcut keys. Related: RHEL-24804 - Bump for el9_4. Related: RHEL-24804 - Fix CI. Related: RHEL-24804 - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Add ibus-hangul-sync-process-key.patch - Resolves: RHEL-14878 - Fix CI tests - Resolves: RHEL-14878 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.11.93 - switch to use GPLv3+ license - support network dictionary - bug fixes - Fixes Shift key switch issue - Fixes python3-gobject warning in setup dialog - Update to 1.11.94 - bug fixes - Update to 1.12.0 - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Clean up ibus write-cache in scriptlet - Resolves: #1974629 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Add ibus-libzhuyin-fixes-super-space.patch - Resolves: RHEL-106766 - Update to 1.4.2 - New translations: tr (Turkish) 100%, uk (Ukrainian) 100%, id (Indonesian) 100%, ja_JP (Japanese) 100%. - Translation updates: zh_CN, pt_BR - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build and make_install macros - No need to call autogen.sh in %prep section - Update to 1.4.3 - New translation: es (Spanish) 100%. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.4.4 - Translation update from Weblate, zh_CN now 100% complete. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Update to 1.12.4 - Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN). zh_CN is 100% complete now. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use standard library mock - Remove i3 from BuildRequires - Use “BuildRequires: appstream” only on Fedora - Update to 1.12.5 - Return False in _execute_command_commit_candidate_number(self, number) if number out of range - Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21 - remove Use-from-unittest-import-mock-instead-of-just-import.patch (included upstream) - Update translations from Weblate (New translation for Sinhala (si) started) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet - Improve CI tests and add gating.yaml - Related: rhbz#1974631 Delete ibus write-cache in scriptlet - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 1.8.3 - Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE Resolves: https://github.com/definite/ibus-table-chinese/pull/14 - Add SUGGESTION_MODE = TRUE to the wubi tables Resolves: https://github.com/definite/ibus-table-chinese/pull/15 - Support pinyin mode also for stroke5 table Resolves: https://github.com/definite/ibus-table-chinese/pull/12 - Use nicer values for symbol and status prompt Resolves: https://github.com/definite/ibus-table-chinese/pull/8 - update jyutping table; add cantonyale table Resolves: https://github.com/definite/ibus-table-chinese/pull/11 - Update jyutping and cantonese tables Resolves: https://github.com/definite/ibus-table-chinese/pull/9 - bump release number to force a rebuild with newer ibus-table >= 1.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build on rawhide - Remove BuildRequirement of cmake-fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don’t index the databases in the post install - Resolves: rhbz#2047954 - Update to 2.10.4 - Use “from unittest import mock” instead of just “import mock”. - Update emoji annotations from CLDR - Translation update from Weblate for zh_CN (still 100% complete) - Use “BuildRequires: appstream” only on Fedora - Update to 2.10.5 - Run the voikko tests only for libvoikko version >= 4.3 - Adapt voikko test cases to the newest voikko version libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3 - Log a warning when language is “fi” and “import libvoikko” failed - Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported - Update emoji annotations from CLDR, switching “no” and “nb” See: https://unicode-org.atlassian.net/browse/CLDR-2698 - Remove icon in emoji-picker.appdata.xml (to avoid warnings from appstream-util and appstreamcli). - Use the voikko build requires only for Fedora. They are only needed to run the voikko test cases during build. - Remove gnome-desktop-testing and ibus-desktop-testing from the requires of the ibus-typing-booster-tests subpackage - Update to 2.11.0 - Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined - Don’t let dialog action area of setup tool expand. - Improve the setup tool to make it possible to enter multi-line expansions of shortcuts - Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158 - Elide extremely long candidates in the lookup table in the middle. - If a candidate contains newlines, replace the newlines with arrows in the lookup table. - If a commit string contains new-lines, commit it in several chunks and forward Return between the chunks. - Update emoji annotations from CLDR - Put the remote icon back in emoji-picker.appdata.xml, it was a false positive by appstreamcli - Translation update from Weblate (pt_PT updated, 100% complete now) - Skip the inscript2 test cases if these transliterations are not available. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet - Improve CI tests and add gating.yaml - Related: rhbz#1974636 Fix license tag - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4 - Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs - Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub - Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96664 - Rebase to JSS 5.5.0-alpha3 - Rebuild with side tag - Add Obsoletes/Conflicts for idm-tomcatjss - Rebuild with side tag - Rebase to JSS 5.5.0 - Rebase to JSS 5.6.0-alpha1 - Rebase to JSS 5.6.0 - Rebase to JSS 5.7.0-beta1 - Rebase to JSS 5.7.0 - Rebase to JSS 5.5.0-alpha3 - Rebuild with side tag - Add Obsoletes/Conflicts for idm-tomcatjss - Rebuild with side tag - Rebase to JSS 5.5.0 - Rebase to JSS 5.6.0-alpha1 - Rebase to JSS 5.6.0 - Rebase to JSS 5.7.0-beta1 - Rebase to JSS 5.7.0 - Rebase to LDAP SDK 5.4.0 - Rebase to LDAP SDK 5.5.0-alpha4 - Rebase to LDAP SDK 5.5.0 - Rebase to LDAP SDK 5.6.0-alpha1 - Rebase to LDAP SDK 5.6.0 - Rebase to PKI 11.5.0 - Rebase to PKI 11.5.1 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.6.0 - Use external runtime dependencies - Drop pki-est subpackage - Rebase to PKI 11.7.0-beta1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.1 - Rebase to PKI 11.5.0 - Rebase to PKI 11.5.1 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.6.0 - Use external runtime dependencies - Drop pki-est subpackage - Rebase to PKI 11.7.0-beta1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.1 - Rebase to PKI 11.5.0 - Rebase to PKI 11.5.1 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.6.0 - Use external runtime dependencies - Drop pki-est subpackage - Rebase to PKI 11.7.0-beta1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.1 - Rebase to PKI 11.5.0 - Rebase to PKI 11.5.1 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.6.0 - Use external runtime dependencies - Drop pki-est subpackage - Rebase to PKI 11.7.0-beta1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.1 - Rebase to PKI 11.5.0 - Rebase to PKI 11.5.1 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.6.0 - Use external runtime dependencies - Drop pki-est subpackage - Rebase to PKI 11.7.0-beta1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.1 - Rebase to PKI 11.5.0 - Rebase to PKI 11.5.1 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.6.0 - Use external runtime dependencies - Drop pki-est subpackage - Rebase to PKI 11.7.0-beta1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.1 - Rebase to PKI 11.5.0 - Rebase to PKI 11.5.1 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.6.0 - Use external runtime dependencies - Drop pki-est subpackage - Rebase to PKI 11.7.0-beta1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.1 - Upgrade to 2.3.0 (#1764345, #1772703) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Touch a couple autoconf related files to prevent undesired rebuilding if %configure changes one or more configure files. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild of 2.19.0 with a newer golang - Update ignition-edge commit to support FIPS - https://github.com/fedora-iot/ignition-edge/pull/2 - New release - Re-sync with upstream changes adding ignition-grub subpackage and a few minor changes - New release - New release - new version - Build Ignition with GOEXPERIMENT=strictfipsruntime - Ignition-validate non-FIPS - new version - new version - new version - Rebuild of 2.19.0 with a newer golang - Update ignition-edge commit to support FIPS - https://github.com/fedora-iot/ignition-edge/pull/2 - New release - Re-sync with upstream changes adding ignition-grub subpackage and a few minor changes - New release - New release - new version - Build Ignition with GOEXPERIMENT=strictfipsruntime - Ignition-validate non-FIPS - new version - new version - new version - Rebuild of 2.19.0 with a newer golang - Update ignition-edge commit to support FIPS - https://github.com/fedora-iot/ignition-edge/pull/2 - New release - Re-sync with upstream changes adding ignition-grub subpackage and a few minor changes - New release - New release - new version - Build Ignition with GOEXPERIMENT=strictfipsruntime - Ignition-validate non-FIPS - new version - new version - new version - Rebuild of 2.19.0 with a newer golang - Update ignition-edge commit to support FIPS - https://github.com/fedora-iot/ignition-edge/pull/2 - New release - Re-sync with upstream changes adding ignition-grub subpackage and a few minor changes - New release - New release - new version - Build Ignition with GOEXPERIMENT=strictfipsruntime - Ignition-validate non-FIPS - new version - new version - new version + iio-sensor-proxy-2.8-1 - Update to 2.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + iio-sensor-proxy-3.0-1 - Update to 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + iio-sensor-proxy-3.1-1 - Update to 3.1 - Resolves: rhbz#1971625 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 + iio-sensor-proxy-3.3-1 - Update to 3.3 - Resolves: rhbz#1993769 - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Initial packaging. - Update to 3.0.2. - Update spec per reviewer comments. - Add main package as dependency to python package. - Rebuilt for Python 3.10 - New upstream release 3.1.2 - Rebase to upstream release v51.0 - Resolves: RHEL-24473, RHEL-23180 - Rebase to upstream release v54.0 - Resolves: RHEL-52886, RHEL-54647, RHEL-51876 - Fix data corruption in bnxt_re - Resolves: RHEL-89179 - Rebase to upstream release v57.0 - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449 - Fix pyverbs tests - Resolves: RHEL-107929, RHEL-107930 - Rebase to upstream release v60.0 - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v61.0 - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebuilt for gating testing - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Adapt to category title translation fix in Anaconda (mkolman) - Drop python-nose from the dependencies (#1916799) (vponcova) - Add the makeupdates script (vponcova) - Remove deprecated support for add-ons (vponcova) - Don't run installation tasks of add-ons in a meta task (vponcova) - Migrate COPR builds from Jenkins to Packit (jkonecny) - Add documentation for the new test solution (jkonecny) - Add support for custom Anaconda COPR repository (jkonecny) - Use `make test` to run TMT tests locally (jkonecny) - Add TMT configuration to get Anaconda COPR build (jkonecny) - Add Packit support for initial-setup (jkonecny) - Update and use setup.py for archive creation (jkonecny) - Fix ChangeLog generation in Makefile (jkonecny) - Add BuildRequires: make (tstellar) - Fixup version number in setup.py (mkolman) - Load the product configuration files (vponcova) - Clean up the code (vponcova) - Include scripts in the updates image (vponcova) - Drop build time dependency on the anaconda package (mkolman) - Remove old failing pre scriptlet (mkolman) - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova) Resolves: rhbz#1962198 - Disable multi TTY handler when running in SSH session (#1951577) (mkolman) Resolves: rhbz#1951577 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Debrand for AlmaLinux - Adapt to category title translation fix in Anaconda (mkolman) - Drop python-nose from the dependencies (#1916799) (vponcova) - Add the makeupdates script (vponcova) - Remove deprecated support for add-ons (vponcova) - Don't run installation tasks of add-ons in a meta task (vponcova) - Migrate COPR builds from Jenkins to Packit (jkonecny) - Add documentation for the new test solution (jkonecny) - Add support for custom Anaconda COPR repository (jkonecny) - Use `make test` to run TMT tests locally (jkonecny) - Add TMT configuration to get Anaconda COPR build (jkonecny) - Add Packit support for initial-setup (jkonecny) - Update and use setup.py for archive creation (jkonecny) - Fix ChangeLog generation in Makefile (jkonecny) - Add BuildRequires: make (tstellar) - Fixup version number in setup.py (mkolman) - Load the product configuration files (vponcova) - Clean up the code (vponcova) - Include scripts in the updates image (vponcova) - Drop build time dependency on the anaconda package (mkolman) - Remove old failing pre scriptlet (mkolman) - Add gnome-kiosk to window managers usable by initial-setup (#1962198) (vponcova) Resolves: rhbz#1962198 - Disable multi TTY handler when running in SSH session (#1951577) (mkolman) Resolves: rhbz#1951577 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Debrand for AlmaLinux - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix rhbz#1956875 - extra rpath - Resolves: #1958287 Rebuild due to updated poppler - Resolves: #1958287 Rebuild due to updated poppler - Enable gspell - Don't install development files for bundled 2geom - Update to 1.1 - Removed libgdl dependency - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync to Fedora branch - Using system build flags - Stripping extra rpath again - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix rhbz#1956875 - extra rpath - Resolves: #1958287 Rebuild due to updated poppler - Resolves: #1958287 Rebuild due to updated poppler - Enable gspell - Don't install development files for bundled 2geom - Update to 1.1 - Removed libgdl dependency - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync to Fedora branch - Using system build flags - Stripping extra rpath again - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix rhbz#1956875 - extra rpath - Resolves: #1958287 Rebuild due to updated poppler - Resolves: #1958287 Rebuild due to updated poppler - Enable gspell - Don't install development files for bundled 2geom - Update to 1.1 - Removed libgdl dependency - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync to Fedora branch - Using system build flags - Stripping extra rpath again - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix hang when BLKTRACESETUP fails and "-o -" is used - Related RHEL-54661 - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Update to upstream 0.16 (RHEL-12494) - Don't fail if a service name cannot be looked up in LDAP - Disable the ipa-ods-exporter service check - Skip DogtagCertsConfigCheck for PKI versions 11.5.0 (RHEL-21367) - Change log file permissions of IPA as per CIS benchmark (RHEL-28575) - Check expiration dates of user-provided certificates (RHEL-80670) - Check for krbLastSuccessfulAuth being enabled (RHEL-4957) - Warn in ipa-healthcheck if umask is not 022 (RHEL-67901) - Incorrect patch merged - Don't rely on order in trust roles (RHEL-99531) - Update to 0.19 release - Add a message if not a trust agent/controller (RHEL-116896) - Check that expected NSS token matches the current FIPS state (RHEL-116897) - Add /etc/pki/tls/certs/ directory to file checker (RHEL-116898) - Check that allowed_uids in the SSSD config is valid (RHEL-79092) - Update to upstream 0.16 (RHEL-12494) - Don't fail if a service name cannot be looked up in LDAP - Disable the ipa-ods-exporter service check - Skip DogtagCertsConfigCheck for PKI versions 11.5.0 (RHEL-21367) - Change log file permissions of IPA as per CIS benchmark (RHEL-28575) - Check expiration dates of user-provided certificates (RHEL-80670) - Check for krbLastSuccessfulAuth being enabled (RHEL-4957) - Warn in ipa-healthcheck if umask is not 022 (RHEL-67901) - Incorrect patch merged - Don't rely on order in trust roles (RHEL-99531) - Update to 0.19 release - Add a message if not a trust agent/controller (RHEL-116896) - Check that expected NSS token matches the current FIPS state (RHEL-116897) - Add /etc/pki/tls/certs/ directory to file checker (RHEL-116898) - Check that allowed_uids in the SSSD config is valid (RHEL-79092) - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-39975 - possible denial of service - Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used - Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling - Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349) - Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side - Resolves: RHEL-39975 - possible denial of service - Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used - Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling - Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349) - Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side - Resolves: RHEL-151875 - authentication no longer works with the new openssl - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Apply changes from RHEL 8 (#1811941, #1831158, #1951480) Resolves: rhbz#2051621 - Backport upstream PR 120 to fix segfault on invalid unit types Resolves: rhbz#2224578 - Add vendor ID for NVIDIA BMCs Resolves: rhbz#2218358 - Update /var/run to /run in ipmievd.service that systemd warns about Resolves: rhbz#2100475 - Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Apply changes from RHEL 8 (#1811941, #1831158, #1951480) Resolves: rhbz#2051621 - Backport upstream PR 120 to fix segfault on invalid unit types Resolves: rhbz#2224578 - Add vendor ID for NVIDIA BMCs Resolves: rhbz#2218358 - Update /var/run to /run in ipmievd.service that systemd warns about Resolves: rhbz#2100475 - Add upstream ipmievd patch to check received msg id against expectation Fixes problem where SEL response is not recognized correctly when SEL request times out Resolves: rhbz#2224569 - Fix for wrong comment in ipset-config file - Fix patch "Parse port before trying by service name" - Bump release for gated side-tag - ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147] - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928] - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463] - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619] - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922] - spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797] - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264] - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264] - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264] - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264] - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264] - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264] - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264] - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497] - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497] - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497] - Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284] - Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284] - Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005] - spec: Fix build on c9s (Phil Sutter) [RHEL-72005] - libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027] - ebtables: Fix corner-case noflush restore bug (Phil Sutter) [RHEL-14147] - extensions: libxt_sctp: Add an extra assert() (Phil Sutter) [RHEL-40928] - spec: Add symlinks for merged extension DSOs (Phil Sutter) [RHEL-32463] - nft: Fix for broken recover_rule_compat() (Phil Sutter) [RHEL-26619] - spec: Ship ebtables-translate and man page (Phil Sutter) [RHEL-32922] - spec: Simplify legacy package integration (Phil Sutter) [RHEL-5797] - xtables-monitor: Ignore ebtables policy rules unless tracing (Phil Sutter) [RHEL-47264] - xtables-monitor: Fix for ebtables rule events (Phil Sutter) [RHEL-47264] - tests: shell: New xtables-monitor test (Phil Sutter) [RHEL-47264] - xtables-monitor: Support arptables chain events (Phil Sutter) [RHEL-47264] - xtables-monitor: Align builtin chain and table output (Phil Sutter) [RHEL-47264] - xtables-monitor: Flush stdout after all lines of output (Phil Sutter) [RHEL-47264] - xtables-monitor: Proper re-init for rule's family (Phil Sutter) [RHEL-47264] - nft: Fix for zeroing existent builtin chains (Phil Sutter) [RHEL-49497] - nft: cache: Annotate faked base chains as such (Phil Sutter) [RHEL-49497] - nft: Fix for zeroing non-existent builtin chains (Phil Sutter) [RHEL-49497] - Bump release for RHEL-9.5.z (Phil Sutter) [RHEL-69283 RHEL-69284] - Bump release for side-tag (Phil Sutter) [RHEL-69283 RHEL-69284] - Revert "xshared: Print protocol numbers if --numeric was given" (Phil Sutter) [RHEL-70173] - spec: Explicitly remove unpackaged files (Michel Lind) [RHEL-72005] - spec: Fix build on c9s (Phil Sutter) [RHEL-72005] - libxtables: Attenuate effects of functions' internal static buffers (Phil Sutter) [RHEL-72027] - arping: Fix 1s delay on exit for unsolicited arpings (RHEL-34110) - arping: exit 0 if running in deadline mode and we see replies (RHEL-27718) - ping: Print reply with wrong source with warning & some follow-up fixes (RHEL-12789, RHEL-13480) - ping: Fix socket error reporting (RHEL-4608) - ping: Fix ping6 binding to VRF and address (RHEL-57734) - Fix CVE-2025-47268 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping (RHEL-94334) - Fix ping hangs under ASan on aarch64 (RHEL-96871) - arping: Fix exit code if receive more replies than sent (RHEL-98281) - Fix CVE-2025-48964 iputils: iputils integer overflow (RHEL-112000) - Update to 1.31 (#1726210) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Workaound fatal GCC 9 compilation/link errors - Fix conditionals for perl BuildRequires - Update to newer git snapshot, synced with qemu.git - Re-enable HTTPS support, with edk2 fix included (bz 1820836) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931] - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246] - Resolves: bz#1956931 (ipxe-roms-qemu list: Clean out old ROMs) - Resolves: bz#1957246 (boot vm from pxe failed) - ipxe-Disable-SHA-1.patch [bz#1935932] - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981] - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138] - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138] - Resolves: bz#1935932 (ipxe implements and/or uses the deprecated SHA-1 algorithm by default () - Resolves: bz#1971981 (Please replace genisoimage with xorriso) - Resolves: bz#1980138 (install qemu rom symlinks so qemu doesn't have to) - ipxe-Add-ping-command-support.patch [bz#1985658] - ipxe-Add-VLAN-tagging-support.patch [bz#1985658] - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658] - ipxe-Provide-snponly.efi-rom.patch [bz#1985658] - ipxe-Build-hwcert-subpackage.patch [bz#1985658] - Resolves: bz#1985658 (carry forward rhel8 ipxe packaging changes) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add ARM 64 EFI artifacts [yselkowi] (bz 2059349) - Fix Obsoletes: and changelog versioning - Workaound fatal GCC 9 compilation/link errors - Fix conditionals for perl BuildRequires - Update to newer git snapshot, synced with qemu.git - Re-enable HTTPS support, with edk2 fix included (bz 1820836) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931] - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246] - Resolves: bz#1956931 (ipxe-roms-qemu list: Clean out old ROMs) - Resolves: bz#1957246 (boot vm from pxe failed) - ipxe-Disable-SHA-1.patch [bz#1935932] - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981] - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138] - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138] - Resolves: bz#1935932 (ipxe implements and/or uses the deprecated SHA-1 algorithm by default () - Resolves: bz#1971981 (Please replace genisoimage with xorriso) - Resolves: bz#1980138 (install qemu rom symlinks so qemu doesn't have to) - ipxe-Add-ping-command-support.patch [bz#1985658] - ipxe-Add-VLAN-tagging-support.patch [bz#1985658] - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658] - ipxe-Provide-snponly.efi-rom.patch [bz#1985658] - ipxe-Build-hwcert-subpackage.patch [bz#1985658] - Resolves: bz#1985658 (carry forward rhel8 ipxe packaging changes) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add ARM 64 EFI artifacts [yselkowi] (bz 2059349) - Fix Obsoletes: and changelog versioning - Workaound fatal GCC 9 compilation/link errors - Fix conditionals for perl BuildRequires - Update to newer git snapshot, synced with qemu.git - Re-enable HTTPS support, with edk2 fix included (bz 1820836) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931] - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246] - Resolves: bz#1956931 (ipxe-roms-qemu list: Clean out old ROMs) - Resolves: bz#1957246 (boot vm from pxe failed) - ipxe-Disable-SHA-1.patch [bz#1935932] - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981] - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138] - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138] - Resolves: bz#1935932 (ipxe implements and/or uses the deprecated SHA-1 algorithm by default () - Resolves: bz#1971981 (Please replace genisoimage with xorriso) - Resolves: bz#1980138 (install qemu rom symlinks so qemu doesn't have to) - ipxe-Add-ping-command-support.patch [bz#1985658] - ipxe-Add-VLAN-tagging-support.patch [bz#1985658] - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658] - ipxe-Provide-snponly.efi-rom.patch [bz#1985658] - ipxe-Build-hwcert-subpackage.patch [bz#1985658] - Resolves: bz#1985658 (carry forward rhel8 ipxe packaging changes) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add ARM 64 EFI artifacts [yselkowi] (bz 2059349) - Fix Obsoletes: and changelog versioning - Workaound fatal GCC 9 compilation/link errors - Fix conditionals for perl BuildRequires - Update to newer git snapshot, synced with qemu.git - Re-enable HTTPS support, with edk2 fix included (bz 1820836) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931] - ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246] - Resolves: bz#1956931 (ipxe-roms-qemu list: Clean out old ROMs) - Resolves: bz#1957246 (boot vm from pxe failed) - ipxe-Disable-SHA-1.patch [bz#1935932] - ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981] - ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138] - ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138] - Resolves: bz#1935932 (ipxe implements and/or uses the deprecated SHA-1 algorithm by default () - Resolves: bz#1971981 (Please replace genisoimage with xorriso) - Resolves: bz#1980138 (install qemu rom symlinks so qemu doesn't have to) - ipxe-Add-ping-command-support.patch [bz#1985658] - ipxe-Add-VLAN-tagging-support.patch [bz#1985658] - ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658] - ipxe-Provide-snponly.efi-rom.patch [bz#1985658] - ipxe-Build-hwcert-subpackage.patch [bz#1985658] - Resolves: bz#1985658 (carry forward rhel8 ipxe packaging changes) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add ARM 64 EFI artifacts [yselkowi] (bz 2059349) - Fix Obsoletes: and changelog versioning - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Fixed ctrl+space problem Resolves: rhbz#1854822 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add missing perl(lib) and perl(Symbol) requires (#1897247) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 4.3 version (#1733770) - Simple rebuilt to have f32 and f31 dist-git in sync - Update to 4.4 version (#1758138) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 4.5.0 version (#1837748) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 4.6.0 version (#1936377) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 4.3 version (#1733770) - Simple rebuilt to have f32 and f31 dist-git in sync - Update to 4.4 version (#1758138) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 4.5.0 version (#1837748) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 4.6.0 version (#1936377) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Initial build - Reduce dependencies - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Switch to new GitHub repository - Update javapackages test plan to f42 - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Set javac source and target to 1.8 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Rebuild - Rebuild - Rebuilt for java-17-openjdk as system jdk - Make javadoc subpackage noarch - Ensure CC env variable is set during build - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 2.4.1 - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 + disable JAS_DEC_DEFAULT_MAX_SAMPLES (RHEL-76762) + disable JAS_DEC_DEFAULT_MAX_SAMPLES (RHEL-76762) + disable JAS_DEC_DEFAULT_MAX_SAMPLES (RHEL-76762) - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Add script to obtain bundled library versions from OpenJDK sources - Related: RHEL-119329 - Update get_bundle_versions.sh to match other scripts - * get_bundle_versions.sh: Add license - * get_bundle_versions.sh: Set compile-command in Emacs - * get_bundle_versions.sh: Use different error codes for different failures - * get_bundle_versions.sh: Remove unneeded '.' in JPEG version - * get_bundle_versions.sh: shellcheck: Double-quote variable references (SC2086) - * get_bundle_versions.sh: shellcheck: Drop use of cat and pass file to awk directly (SC2002) - Add OpenJDK 8u support to get_bundle_versions.sh - Print bundle updates and backouts at end of openjdk_news.sh output - Refer user to get_bundle_versions.sh when bundle updates are found by openjdk_news.sh - Add timezone data update check to openjdk_news.sh - Add duplicate check to openjdk_news.sh - Exit if no fixes are obtained rather than try to run filters in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-119329 - Update to 8u472-b08 (GA). - Update release notes for 8u472-b08. - Drop local JDK-8339414 fix as this is now included upstream - Reset rpmrelease to 1 now there are no other RPM builds on RHEL 9 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118767 - Resolves: RHEL-119455 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Change portablerhel - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118767 - Related: RHEL-119455 - Related: RHEL-118775 - Update to 8u482-b08 (GA). - Update release notes for 8u482-b08. - Remove generated-configure.sh changes from JDK-8141590 & FIPS patch as we already autogenerate this - Turn on system FreeType as on later JDK versions and add to _privatelibs - Set bundled FreeType version to 2.13.2 following JDK-8316028 - Bump LCMS 2 version to 2.14.0 following JDK-8297088 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-142687 - Resolves: RHEL-139534 - Resolves: RHEL-131588 - Resolves: RHEL-131600 - Resolves: RHEL-142875 - Resolves: RHEL-142697 - Bump rpmrelease for CentOS build - Related: RHEL-142687 - Related: RHEL-139534 - Related: RHEL-131588 - Related: RHEL-131600 - Related: RHEL-142875 - Related: RHEL-142697 - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Change portablerhel - Update tagging scripts to include signature checks and correctly handle gating - Add gating scripts to simplify obtaining results and waiving issues - Resolves: RHEL-147634 - Resolves: RHEL-151197 - Update to 8u492-b09 (GA) - Update release notes for 8u492-b09. - Add missing CVEs for 8u482. - Regenerate JDK-8199936/PR3533 patch following JDK-8374917 - Regenerate JDK-8186464/RH1433262 patch following JDK-8370986 - Drop local giflib 5.2.2 patch now JDK-8328999 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump LCMS 2 version to 2.15.0 following JDK-8303482 - Bump libpng version to 1.6.57 following JDK-8375063, JDK-8377526, JDK-8380959 & JDK-8382047 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169446 - Resolves: RHEL-133291 - Resolves: RHEL-147348 - Resolves: RHEL-148407 - Resolves: RHEL-148981 - Resolves: RHEL-161303 - Resolves: RHEL-161452 - Resolves: RHEL-157139 - Resolves: RHEL-157156 - Bump release for PQC build - Related: RHEL-169446 - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Resolves: RHEL-212327 - Resolves: RHEL-212328 - Update to 8u502-b07 (GA). - Update release notes for 8u502-b07. - Bump lcms2 version to 2.19.1 following JDK-8321489, JDK-8348110, JDK-8375065 & JDK-8383354 - Bump zlib version to 1.3.2 following JDK-8378631 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Add attempted patch for JDK-8385876 to fix -Wnonnull build failure with s390x Zero on CentOS 9 - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Explictly define supported architectures - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Update tagged versions to include 9.8.0-z & 9.9.0. - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Obsolete old RHEL releases (8.2.0-z, 9.0.0-z, 9.7.0-z) - Sync the copy of the portable specfile with the latest update - Sync portable naming with later JDKs, due to adoption of <compatiblename> by portable - Drop <pversion> which is a redundant alias for version now - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212095 - Resolves: RHEL-188852 - Resolves: RHEL-149784 - Resolves: RHEL-212316 - Resolves: RHEL-212318 - Related: RHEL-212327 - Resolves: RHEL-212329 - Resolves: RHEL-212330 - Bump release for PQC build - Related: RHEL-212095 - Related: RHEL-188852 - Related: RHEL-149784 - Related: RHEL-212316 - Related: RHEL-212318 - Related: RHEL-212329 - Related: RHEL-212330 - Related: RHEL-212327 - Related: RHEL-212328 - Add CVEs to NEWS file - Related: RHEL-188852 - Update to 8u504-b01 (GA). - Update release notes for 8u504-b01. - Bump FreeType version to 2.14.3 following JDK-8385390 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235603 - Add CVEs for August 2026 release - Bump release for PQC build - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Related: RHEL-235603 - Change portablerhel - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-11.0.24+8 (GA) - Update release notes to 11.0.24+8 - Adjusted DTLS & RPATH NEWS entries to match OpenJDK 17 & 21 release notes - Switch to GA mode for release - Fix Provides to reflect up to date component versions - Add zlib build required or bundled version (1.3.1), depending on system_libs setting - Resolves: RHEL-45202 - ** This tarball is embargoed until 2024-07-16 @ 1pm PT. ** - Update to jdk-11.0.25+6 (EA) - Update release notes to 11.0.25+6 - Switch to EA mode - Bump giflib version to 5.2.2 following JDK-8328999 - Bump libpng version to 1.6.43 following JDK-8329004 - Related: RHEL-58775 - Limit Java only tests to one 'jdk_test_arch' - Related: RHEL-58775 - Resolves: RHEL-59730 - Update to jdk-11.0.25+7 (EA) - Update release notes to 11.0.25+7 - Related: RHEL-58775 - RHJDKBP-875 - Added gating.yaml and/or rpminspect.yaml - RHJDKBP-874 - Removed - Related: RHEL-58775 - Update to jdk-11.0.25+8 (EA) - Update release notes to 11.0.25+8 - Related: RHEL-58775 - Update to jdk-11.0.25+9 (GA) - Update release notes to 11.0.25+9 - Switch to GA mode for release - Related: RHEL-58775 - ** This tarball is embargoed until 2024-10-15 @ 1pm PT. ** - Make java-11-openjdk NOT the default JDK in rhel-9.2.0.z, rhel-9.4.z, rhel-9.5.z - Resolves: RHEL-63042 - See-Also: RHEL-63043 - See-Also: RHEL-63044 - Make java-11-openjdk the default JDK only on RHEL x86_32 - Drop system timezone data dependency from base RHEL 11u builds - Resolves: RHEL-70599 - See-Also: RHEL-70600 - See-Also: RHEL-70601 - Resolves: RHEL-71242 - See-Also: RHEL-71243 - See-Also: RHEL-71244 - Adapted to newest copy-jdk-configs to fix issue with rpm 4.17 - Disable copy-jdk-configs for Flatpak builds - Removed copy-jdk-configs backward compatibility to fix when both rpm 4.16 and 4.17 are in transaction - Resolves: RHEL-73880 - See-Also: RHEL-73881 - See-Also: RHEL-73882 - See-Also: RHEL-73873 - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-17.0.16+8 - Add to .gitignore openjdk-17.0.16+8.tar.xz - Set updatever to 16 - Set buildver to 8 - Set rpmrelease to 2 - Update sources to openjdk-17.0.16+8.tar.xz - Resolves: RHEL-101788 - Resolves: RHEL-101795 - Resolves: RHEL-101796 - Resolves: RHEL-101797 - Resolves: RHEL-102283 - Resolves: RHEL-102286 - Resolves: RHEL-102285 - Resolves: RHEL-102284 - Require tzdata-java 2025b at runtime and for build - Set bundled freetype provide version to 2.13.3 - Set bundled harfbuzz provide version to 10.4.0 - Set bundled lcms2 provide version to 2.17.0 - Set bundled libpng provide version to 1.6.47 - Recommend pipewire - Related: RHEL-102667 - Resolves: RHEL-102669 - Resolves: RHEL-102670 - Resolves: RHEL-102672 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Update to jdk-17.0.17+10 (GA) - Add to .gitignore openjdk-17.0.17+10.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set updatever to 17 - Set buildver to 10 - Set rpmrelease to 1, remove 'must start at 2' comment - Set bundled harfbuzz version to 11.2.0 - Update sources to openjdk-17.0.17+10.tar.xz - Resolves: RHEL-119458 - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Update to jdk-17.0.18+7 (EA) - Add to .gitignore openjdk-17.0.18+7-ea.tar.xz - Set updatever to 18 - Set buildver to 7 - Set is_ga to 0 - Update sources to openjdk-17.0.18+7-ea.tar.xz - Set bundled libpng version to 1.6.51 - Resolves: RHEL-131590 - Resolves: RHEL-131601 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Update to jdk-17.0.18+8 (GA) - Add to .gitignore openjdk-17.0.18+8.tar.xz - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set buildver to 8 - Set is_ga to 1 - Update sources to openjdk-17.0.18+8.tar.xz - Resolves: RHEL-139552 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Set rpmrelease to 2 - Sync java-17-openjdk-portable.specfile from openjdk-portable-centos-9 - Set fipsver to e1780dd5d39 - Resolves: RHEL-122136 - Add test to ensure blocked.certs is valid (OPENJDK-4362) - Restore NEWS file so portable can be rebuilt - Resolves: RHEL-149327 - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set portablerelease to 2 - Remove test to ensure blocked.certs is valid, done in portable - Related: RHEL-122136 - Related: RHEL-131590 - Related: RHEL-131601 - Related: RHEL-139552 - Related: RHEL-149327 - Update to jdk-17.0.19+10 (GA) - Add to .gitignore openjdk-17.0.19+10.tar.xz - Set updatever to 19 - Set buildver to 10 - Set rpmrelease to 1 - Update sources to openjdk-17.0.19+10.tar.xz - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Set tzdata requires and build requires to 2026a - Set bundled freetype library version to 2.14.2 - Set bundled giflib library version to 6.1.2 - Set bundled harfbuzz library version to 12.3.2 - Set bundled libpng library version to 1.6.57 - Set bundled zlib library version to 1.3.2 - Set fipsver to 62c0f885e30 - Sync NEWS from openjdk-portable-rhel-8 - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set portablerelease to 1 - Resolves: RHEL-133292 - Resolves: RHEL-147350 - Resolves: RHEL-148408 - Resolves: RHEL-148987 - Resolves: RHEL-161296 - Resolves: RHEL-161445 - Resolves: RHEL-157135 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20+8 (GA) - Add to .gitignore openjdk-17.0.20+8.tar.xz - Set updatever to 20 - Set buildver to 8 - Update sources to openjdk-17.0.20+8.tar.xz - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188875 - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field (OPENJDK-4876) - Set tzdata requires and build requires to 2026b - Set fipsver to 821eb26f706 - Delete comments about patch macro syntax - Set bundled freetype version to 2.14.3 - Set bundled giflib version to 6.1.3 - Set bundled harfbuzz version to 14.2.0 - Set bundled lcms2 version to 2.19.1 - Set bundled libpng version to 1.6.58 - Sync NEWS from private-gnu_andrew-rhel-8.5-vanilla - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Update to jdk-17.0.20.1+1 (GA) - Add to .gitignore openjdk-17.0.20.1+1.tar.xz - Set patchver to 1 - Set buildver to 1 - Set rpmrelease to 1 - Update sources to openjdk-17.0.20.1+1.tar.xz - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235614 - Update NEWS for jdk-17.0.20.1+1 (GA) - Sync java-17-openjdk-portable.specfile from openjdk-portable-rhel-8 - Set rpmrelease to 2 for PQC signing - Change portablesiffix - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Update to jdk-21.0.8+8 (EA) - Update release notes to 21.0.8+8 - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-101798 - Recommend PipeWire on RHEL 9 and later for java.awt.Robot screenshots under Wayland - Resolves: RHEL-102677 - Update to jdk-21.0.8+9 (GA) - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-07-15 @ 1pm PT. ** - Resolves: RHEL-102289 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Set portablesuffix to el8 - Update to jdk-21.0.9+10 (GA) - Update release notes to 21.0.9+10 - Bump harfbuzz version to 11.2.0 following JDK-8355528 - Add NEWS corrections from Thomas - Use double spacing consistently in notes for this release - Correct 11u release reference to corresponding 21u release as pointed out by Kieran - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2025-10-21 @ 1pm PT. ** - Resolves: RHEL-118774 - Resolves: RHEL-119466 - Bump rpmrelease for CentOS build - Add scripts to handle tagging of portable-based RPMs - Related: RHEL-118774 - Related: RHEL-119466 - Update to jdk-21.0.10+7 (GA) - Update release notes to 21.0.10+7 - Bump libpng version to 1.6.51 following JDK-8372534 - Update FIPS patch to include nss.fips.cfg that grants CKA_ENCRYPT - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-142859 - Resolves: RHEL-139560 - Resolves: RHEL-131592 - Resolves: RHEL-131602 - Resolves: RHEL-122121 - Resolves: RHEL-142820 - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Set portablesuffix to el8 - Bump rpmrelease for CentOS build - Related: RHEL-142859 - Related: RHEL-139560 - Related: RHEL-131592 - Related: RHEL-131602 - Related: RHEL-122121 - Related: RHEL-142820 - Update to jdk-21.0.11+10 (GA) - Update release notes to 21.0.11+10 - Update FIPS patch to feef2dc3ca7 version synced with 21.0.11+9 and adapted to JDK-8244336 - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 21.0.13 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169609 - Resolves: RHEL-133293 - Resolves: RHEL-147352 - Resolves: RHEL-148409 - Resolves: RHEL-148992 - Resolves: RHEL-157141 - Resolves: RHEL-161305 - Resolves: RHEL-161454 - Resolves: RHEL-169616 - Bump release for PQC build - Related: RHEL-169609 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Do not overwrite slowdebug __provides_exclude_from and __requires_exclude_from regexps - Make headless own /usr/share/doc/java-1.8.0-openjdk - Make javadoc-zip own /usr/share/javadoc/java-1.8.0-openjdk - Resolves: RHEL-151167 - Resolves: RHEL-212348 - Resolves: RHEL-212349 - Update to jdk-21.0.12+8 (GA) - Update release notes to 21.0.12+8 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Update tagging scripts to include signature checks and correctly handle gating - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Make zone string debug output optional in TestTranslations - Change javadoc-zip to just own the top-level directory, not include the entire subtree - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-212332 - Resolves: RHEL-212334 - Resolves: RHEL-212336 - Resolves: RHEL-151193 - Resolves: RHEL-212341 - Resolves: RHEL-188866 - Resolves: RHEL-212345 - Resolves: RHEL-212347 - Related: RHEL-212349 - Bump release for PQC build - Related: RHEL-212332 - Related: RHEL-212334 - Related: RHEL-212336 - Related: RHEL-151193 - Related: RHEL-212341 - Related: RHEL-188866 - Related: RHEL-212345 - Related: RHEL-212347 - Related: RHEL-151167 - Related: RHEL-212348 - Related: RHEL-212349 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188866 - Update to jdk-21.0.12.1+1 (GA) - Update release notes to 21.0.12.1+1 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235625 - Bump release for PQC build - Related: RHEL-235625 - Set portablesuffix to el8 - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Pass ourflags and ourldflags into the nssadapter build using CFLAGS & LDFLAGS - Patch the nssadapter build to recognise LDFLAGS - Resolves: RHEL-131898 - Add java-25-openjdk-crypto-adapter subpackage - Update library setting in create-redhat-properties-files.bash - Remove /usr/lib/jvm/java-25-openjdk/conf/security/redhat/fips.properties - Resolves: RHEL-132520 - Resolves: RHEL-132523 - Incorporate new FIPS patch for 25u - Drop static libjvm.a following adjusted build target for portable build - Remove redundant (and now outdated) build targets, jdkimage and static_libs_image - Remove OpenJDK compiler flag filters and use build_{c,ld}flags directly - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-133743 - Resolves: RHEL-133737 - Related: RHEL-131898 - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Use el9 portable packages - Update to jdk-25.0.2+10 (GA) - Update release notes to 25.0.2+10 - Add JDK-8372534 libpng 1.6.51 ahead of 25.0.3 - Bump libpng version to 1.6.51 following JDK-8372534 - Bump ID of NSS adapter patch so we can stay in sync with portable on the libpng patch - Test for java.security's existence in create-redhat-properties-files.bash - Handle 'upgrade' as an alternative to 'update' in openjdk_news.sh - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-01-20 @ 1pm PT. ** - Resolves: RHEL-139577 - Resolves: RHEL-143373 - Resolves: RHEL-143368 - Resolves: RHEL-142856 - Resolves: RHEL-142808 - Execute create-redhat-properties-files.bash with '-e' to exit on failure - Related: RHEL-142856 - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Use el9 portable packages - Bump rpmrelease for CentOS build - Related: RHEL-139577 - Related: RHEL-142856 - Related: RHEL-142808 - Update FIPS patch to e55ada9353e to include the fix for the too restrictive provider lockdown - Fix FIPS issue list to represent the new 25u version - Add JDK-8375063 libpng 1.6.54 ahead of 25.0.3 - Add JDK-8375057 harfbuzz 12.3.2 ahead of 25.0.3 - Add JDK-8377526 libpng 1.6.55 ahead of 25.0.3 - Bump libpng version to 1.6.55 following JDK-8375063 & JDK-8377526 - Bump harfbuzz version to 12.3.2 following JDK-8375057 - Bump nssadapter version to bring in shared PKCS11 session fix - Drop LDFLAGS nssadapter patch which is now upstream in 0.1.1 - Add tagging scripts with signature checks and gating handling - Update tagged versions to include 9.8.0-z, 9.9.0, 10.2-z & 10.3. - Add gating scripts to simplify obtaining results and waiving issues - Sync the copy of the portable specfile with the latest update - Resolves: RHEL-155001 - Resolves: RHEL-147354 - Resolves: RHEL-148410 - Resolves: RHEL-148997 - Resolves: RHEL-155047 - Resolves: RHEL-155330 - Resolves: RHEL-156036 - Resolves: RHEL-156040 - Disable abidiff inspection in rpminspect.yaml to avoid an out-of-memory error on the CentOS test farm - See: https://docs.testing-farm.io/Testing%20Farm/0.1/errors.html#TFE-1 - Resolves: RHEL-149786 - Update to jdk-25.0.3+9 (GA) - Update release notes to 25.0.3+9 - Update FIPS patch to 57722aab802 version synced with 25.0.3+8 - Drop local libpng patches now JDK-8372534, JDK-8375063 & JDK-8377526 are included upstream - Drop local HarfBuzz patch now JDK-8375057 is included upstream - Bump freetype version to 2.14.2 following JDK-8373290 & JDK-8379158 - Bump giflib version to 6.1.2 following JDK-8379256 & JDK-8380078 - Bump libpng version to 1.6.57 following JDK-8380959 & JDK-8382047 - Bump zlib version to 1.3.2 following JDK-8378631 - Add JDK-8375294 EOPNOTSUPP patch ahead of 25.0.4 - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-04-21 @ 1pm PT. ** - Resolves: RHEL-169619 - Resolves: RHEL-157142 - Resolves: RHEL-157154 - Resolves: RHEL-161306 - Resolves: RHEL-161455 - Resolves: RHEL-169615 - Cleanup tagging and gating scripts to appease shellcheck: - * scripts/builds/build_vanilla.sh: Use an array to handle the varying arguments to rhpkg. - * scripts/builds/check_signatures.sh: Quote variable usage. - * scripts/builds/waive_issue.sh: Remove redundant 'test "x"' usage. - * scripts/builds/waive_leapp_issue.sh: Likewise. - * scripts/builds/waive_rpminspect.sh: Likewise. - * scripts/builds/waive_usual_rpminspect.sh: Likewise and add missing WORKING_DIR variable. - * scripts/builds/waive_usual_tier0.sh: Remove redundant 'test "x"' usage. - Remove macro references in comments where possible (- Move version information and core NVR definitions back towards the top of the file - Specify portablerelease and rpmrelease (always 0 for portables) in the Release field - Add 25u backports of JDK-8347901 & JDK-8378713 C2 performance fixes - Sync the copy of the portable specfile with the latest update - Related: RHEL-155330 - Related: RHEL-156040 - Resolves: RHEL-149785 - Resolves: RHEL-211047 - Resolves: RHEL-211051 - Add family option with name argument to alternatives install lines (OPENJDK-4854) - Resolves: RHEL-211053 - Update to jdk-25.0.4+7 (GA) - Update release notes to 25.0.4+7 - Bump freetype version to 2.14.3 following JDK-8385390 - Bump giflib version to 6.1.3 following JDK-8384902 - Bump HarfBuzz version to 14.2.0 following JDK-8385490 - Bump lcms2 version to 2.19.1 following JDK-8375065 & JDK-8383354 - Bump libpng version to 1.6.58 following JDK-8384495 - Require tzdata 2026b due to upstream inclusion of JDK-8383175 - Drop local copy of JDK-8375294 EOPNOTSUPP patch - Obsolete old RHEL releases (9.7.0-z, 10.1-z) - Revert fr_FR and de_DE changes made in d43f0e6186370fdeb0ca2f3594f39783e20eef1c now JDK-8382020 is fixed - Simplify TestTranslations run now there is only the CLDR provider and one set of data (JDK-8174269) - Make zone string debug output optional in TestTranslations - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-07-21 @ 1pm PT. ** - Resolves: RHEL-188880 - Resolves: RHEL-212293 - Resolves: RHEL-212297 - Add CVEs to NEWS file - Update to tarball with final changeset ID - Sync the copy of the portable specfile with the latest update - Related: RHEL-188880 - Update to jdk-25.0.4.1+1 (GA) - Update release notes to 25.0.4.1+1 - Report pkgos value during build - Sync the copy of the portable specfile with the latest update - ** This tarball is embargoed until 2026-08-18 @ 1pm PT. ** - Resolves: RHEL-235632 - Use el9 portable packages - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Add generated Requires on multiple versions of java-headless - Related: rhbz#2164437 - Make OpenJDK 17 the default JRE/JDK - Related: RHEL-62403 - Include java-21-headless in generated auto-requires - Related: RHEL-62409 - Drop generated Requires on various Java versions - Related: RHEL-62409 - Use Java 11 build tool bindings for package builds - Rebuild - Rebuild - Update to upstream version 6.4.0 - Initial package renamed from glassfish-jaxb-api. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial build - Initial build - Update licenses - Update to upstream version 4.0.2 - Initial build - Update licenses - Update to upstream version 4.0.2 - Initial build - Initial build - Reduce dependencies, reorganize subpackages - Initial build - Reduce dependencies, reorganize subpackages - Initial build - Update licenses - Update to upstream version 4.0.2 - Initial build - Update licenses - Update to upstream version 4.0.2 - Initial build - Update licenses - Update to upstream version 4.0.2 - Initial build - Update licenses - Update to upstream version 4.0.2 - Initial build - Update licenses - Update to upstream version 4.0.2 - Initial build - Update licenses - Update to upstream version 4.0.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL-9.2.0 - Resolves: #2121499 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Fix JDK11 build by adding dependency for javax.xml.bind. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 3.4.1. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Switch from log4j 1.2 compat package to log4j 1.2 API shim. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop log4j and jboss-logmanager dependencies - Drop jboss-logging-javadoc - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt as part of revival process - BZ#1758293 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 2.2.1. - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop jboss-logmanager dependency - Drop jboss-logging-tools-javadoc - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Build with default JDK 17 - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Update to upstream version 1.7.36 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Patch for javaparser API changes - Update to latest upstream version - Obsolete sub-packages that cannot be built on JDK 11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to version 3.2.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 3.3.0 - Remove dependency on javaparser and exec-maven-plugin - Disable tests - Build with OpenJDK 8 - Rebuild as part of revival process - BZ#1758686 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Force Java 8 as sun.reflect.Reflection is removed in Java 11. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bug 1981014 - jdeparser: FTBFS due to access to internal class sun.reflect.Reflection - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Update Java source/target to 1.8 - Fix unexpected permissions of regular files - initial build - added requires of criu-devel - criu-devel moved to BR - now requires criu-libs - enabled debuginfo generation - excluded i686 build as criu is 64b only - .so file moved out of jar. Required teo patches: - added and applied patch0 output_loc.patch - added and applied patch1 load_library.patch - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9. - This also ensures use of the standard build flags and installs the jar in the expected location. - Resolves: rhbz#1972029 - Update to latest upstream version with renamed package and consistent use of "jigawatts" - Drop library patch which is no longer needed. - Resolves: rhbz#1972029 - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release. - Resolves: rhbz#1972029 - Rebase to upstream release, 1.21.0.0.0. - Resolves: rhbz#1972029 - Added gating yaml - Resolves: rhbz#1989529 - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds - Resolves: rhbz#2071920 - initial build - added requires of criu-devel - criu-devel moved to BR - now requires criu-libs - enabled debuginfo generation - excluded i686 build as criu is 64b only - .so file moved out of jar. Required teo patches: - added and applied patch0 output_loc.patch - added and applied patch1 load_library.patch - on aarch64 workarounded missing lib64 on /usr/LD_LIBRARY_PATH - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rewrite to use autotools build system, avoiding need for Maven dependencies missing in RHEL 9. - This also ensures use of the standard build flags and installs the jar in the expected location. - Resolves: rhbz#1972029 - Update to latest upstream version with renamed package and consistent use of "jigawatts" - Drop library patch which is no longer needed. - Resolves: rhbz#1972029 - Store the upstream version (currently "1.0-SNAPSHOT") and snapshot info completely in the Version field rather than using Release. - Resolves: rhbz#1972029 - Rebase to upstream release, 1.21.0.0.0. - Resolves: rhbz#1972029 - Added gating yaml - Resolves: rhbz#1989529 - Bump release number to make RHEL 9.1 build later than RHEL 9 Beta & RHEL 9 GA builds - Resolves: rhbz#2071920 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Build without reflections optional dependency (#1954987) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Fix compatibility with Java 8 - Resolves: rhbz#2162040 - Set correct compat. value also to ant parameters - Resolves: rhbz#2162040 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Build without reflections optional dependency (#1954987) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Fix compatibility with Java 8 - Resolves: rhbz#2162040 - Set correct compat. value also to ant parameters - Resolves: rhbz#2162040 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Convert to new fonts packaging guidelines - Update fontconfig DTD id in conf file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase jose-14 upstream version Resolves: #RHEL-38079 - initial version - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - change webpack hash function to sha256 - remove unused cryptographic implementations - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 4.0.7 tagged upstream community sources, see CHANGELOG - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.5.2 - Update to 1.6.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.6.4 - Update to 1.6.6 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Replace CC-BY-2.5 annotations with Apache-2.0 ones - Resolves: rhbz#2301569 - Use xpath macros instead of sed - Update javapackages test plan to f42 - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Minor conditional tweaks for ELN - Update to 7.210 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add base and extra subpackage web fonts for Design Team - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Workaround "multiple definition of `yyin'" - Resolves https://bugzilla.redhat.com/show_bug.cgi?id=1799559 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add support for symbol namespaces - Resolves: rhbz#1761409 - Add support for ET_EXEC - Add support for DW_TAG_restrict_type - Resolves: rhbz#1761409 - Fix annocheck failures - Fix osci tier0 test reference - Fix ET_DYN vmlinux namespace support - Resolves: rhbz#2038913 - Resolves: rhbz#2045976 - Resolves: rhbz#2038892 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Migrate kasumi GUI to GTK3 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop gtk2 dependency completely. - Make anthy build conditionally for Fedora release only. Resolves: rhbz#1939777 - Fix build fail without anthy-devel. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for CI Related: rhbz#2032140 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Migrate kasumi GUI to GTK3 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop gtk2 dependency completely. - Make anthy build conditionally for Fedora release only. Resolves: rhbz#1939777 - Fix build fail without anthy-devel. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for CI Related: rhbz#2032140 - Disable kdump.service explicitly if users request to (RHEL-41082) - Handle the case where systemd isn't installed (RHEL-86873) - Feature: Set up crypttab - Update to 2.2.8 (#2215308) - Fix keepalived.conf installation (#2215308) - Better validation of ipsetnames for CVE-2024-41184 Resolves: RHEL-49558 - lvs: if lost misc check child register checker again Resolves: RHEL-81939 - fix "Keepalived claims that blackhole route doesn't have interface and can't be tracked" Resolves: RHEL-40520 - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - macros.kmp: do not run `rpm -qa` Resolves: RHEL-57823 - macros.kmp: do not run `rpm -qa` Resolves: RHEL-57823 - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with latest json-c - Add html documentation and man page - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to version 1.3 - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Update openssl crate to version 0.10.70 to fix CVE-2025-24898 - Fix cargo_build macro usage - Remove /usr/libexec/keylime/ Resolves: RHEL-145712 - Enable attestation with TPM ECC keys Resolves: RHEL-118148 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - Update to 1.6.1 - Spec cleanups - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream version 1.6.3 Related: rhbz#2119105 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Convert to new fonts packaging guidelines (rh#1828983) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961996 - Add gating tests - Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE-2024-37370 CVE-2024-37371 Fix vulnerabilities in GSS message token handling Resolves: RHEL-45402 RHEL-45392 - libkrad: implement support for Message-Authenticator (CVE-2024-3596) Resolves: RHEL-55423 - Fix various issues detected by static analysis Resolves: RHEL-58216 - Remove RSA protocol for PKINIT Resolves: RHEL-15323 - Support PKCS11 EC client certs in PKINIT Resolves: RHEL-74374 - kdb5_util: fix DB entry flags on modification Resolves: RHEL-56059 - Add ECDH support for PKINIT (RFC5349) Resolves: RHEL-4902 - Prevent overflow when calculating ulog block size (CVE-2025-24528) Resolves: RHEL-76759 - Add dedicated tests sub-package - Do not block HMAC-MD4/5 in FIPS mode Resolves: RHEL-88704 - Don't issue RC4 session keys by default (CVE-2025-3576) Resolves: RHEL-88048 - Add PKINIT paChecksum2 from MS-PKCA v20230920 Resolves: RHEL-82647 - krad: packet ID fetched from uninitialized variable Resolves: RHEL-145355 - Create sub-package for xrealmauthz KDC plugin Resolves: RHEL-67468 - Improving kerberos ulog resize efficiency Resolves: RHEL-145359 - Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356) Resolves: RHEL-171590 RHEL-171596 - Add forking workaround for block stdout redir Resolves: RHEL-55913 - Change p_job variable type from short to int Resolves: RHEL-64299 - Fix segfault on starting ksh with no TERM env var Resolves: RHEL-83283 - Fix 'stty -echo' in scripts Resolves: RHEL-83043 - Fix long multibyte characters paste issue via ssh Resolves: RHEL-87561 - Fix segfault upon SIGWINCH after 'stty -echo' Resolves: RHEL-91097 - Fix recalling lines starting with whitespace Resolves: RHEL-74464 - Fix SIGPIPE subshell regression Resolves: RHEL-92646 - Fix arbitrary command execution/code injection bugs Resolves: RHEL-99063 - Fix /dev/fd/1 memory fault and $0 for /dev/fd scripts Resolves: RHEL-146564 - Initial build [bz#1972158] - Resolves: bz#1972158 (Add ksmtuned component to RHEL 9) - Disable packaging of gtk+-based lame-mp3x (#1760961, #1760995 #c1) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable packaging of gtk+-based lame-mp3x (#1760961, #1760995 #c1) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Change default for Sinhala and Vietnamese to use ibus-m17n keymaps for Fedora - Don't Recommends: packages in RHEL which are not available - Add more entries to previous commit - Move Vietnamese to use ibus-unikey as default IME (#1913431) - Revert previous ibus-unikey change for RHEL - add subpackages for Hong Kong (zh_HK) - ja: use ibus-anthy - zh_HK: use ibus-table-chinese-cangjie - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Parse stuff in glibc locale names after @ which is not a script as a variant - Add ckb_IQ.UTF-8 locale - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.0.52 - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com> - Update to 0.0.53 - Capitalize the return values of language_name() and territory_name() (See: https://github.com/rhinstaller/anaconda/pull/2837). - Add more translations from CLDR - Get translation changes from CLDR - Update to 0.0.54 - add list_common_languages derived from gnome-control-center by Sundeep ANAND <suanand@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rename manpages: some names conflict with the man-pages package Resolves: rhbz#2222868 - Add explicit requires to the devel subpackages Related: rhbz#2229142 - Fix soname of the 64-bit version libraries Resolves: RHEL-24851 - Spec file cleanup - Remove unused patches Related: RHEL-5770 - Add explicit requires to the devel subpackages - Note: the the cblas64 seems to be linked against the libblas (not the 64 version) - this is not a regression, however in the Fedora it uses libblas64 instead. - Resolves: RHEL-5768 - Fixing CVE-2025-47151 Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to enable CI and gating. Resolves: rhbz#1989812 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to new upstream version. - Update to new upstream version. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to new upstream version. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to new upstream version. - Update to new upstream version. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to new upstream version. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix digest calculation of sha256 (RHEL-20391) - Fix digest calculation of sha256 (RHEL-20391) - Fix CVE-2026-10846: DNS response spoofing via missing address/port/TXID and question section validation (RHEL-210701) - Update to 1.79.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.80.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make gnuplot build dependency optional, used only by tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ensure proper closing of TLS connection - Resolves: RHEL-90997 - Improve fix for close of TLS connection - Resolves: RHEL-90997 - Do not wait for server close-notify on TLS close - Resolves: RHEL-100406 - Adding a timeout for TLS close - Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport NULL check to avoid a crash Resolves: https://issues.redhat.com/browse/RHEL-58298 - Backport fixes for XIM input sometimes jumbled (RHEL-69791) - Rebase to version 1.8.12 - Update license to MIT AND X11 (SPDX migration) - Change source format from .tar.bz2 to .tar.xz - Add libtool as BuildRequires - Remove CVE patches (now included upstream) - Add patch to lower autoconf requirement to 2.69 - Update dont-forward-keycode-0.patch for new codebase - Remove NEWS from %doc (file not present in 1.8.12) - Resolves: RHEL-111537 - Backport NULL check to avoid a crash Resolves: https://issues.redhat.com/browse/RHEL-58298 - Backport fixes for XIM input sometimes jumbled (RHEL-69791) - Rebase to version 1.8.12 - Update license to MIT AND X11 (SPDX migration) - Change source format from .tar.bz2 to .tar.xz - Add libtool as BuildRequires - Remove CVE patches (now included upstream) - Add patch to lower autoconf requirement to 2.69 - Update dont-forward-keycode-0.patch for new codebase - Remove NEWS from %doc (file not present in 1.8.12) - Resolves: RHEL-111537 - Backport NULL check to avoid a crash Resolves: https://issues.redhat.com/browse/RHEL-58298 - Backport fixes for XIM input sometimes jumbled (RHEL-69791) - Rebase to version 1.8.12 - Update license to MIT AND X11 (SPDX migration) - Change source format from .tar.bz2 to .tar.xz - Add libtool as BuildRequires - Remove CVE patches (now included upstream) - Add patch to lower autoconf requirement to 2.69 - Update dont-forward-keycode-0.patch for new codebase - Remove NEWS from %doc (file not present in 1.8.12) - Resolves: RHEL-111537 - Backport NULL check to avoid a crash Resolves: https://issues.redhat.com/browse/RHEL-58298 - Backport fixes for XIM input sometimes jumbled (RHEL-69791) - Rebase to version 1.8.12 - Update license to MIT AND X11 (SPDX migration) - Change source format from .tar.bz2 to .tar.xz - Add libtool as BuildRequires - Remove CVE patches (now included upstream) - Add patch to lower autoconf requirement to 2.69 - Update dont-forward-keycode-0.patch for new codebase - Remove NEWS from %doc (file not present in 1.8.12) - Resolves: RHEL-111537 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - libXcomposite 0.4.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - libXcomposite 0.4.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - libXcursor 1.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - libXcursor 1.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - libXdamage 1.1.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - libXdamage 1.1.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191886 Resolves: https://redhat.atlassian.net/browse/RHEL-191933 Resolves: https://redhat.atlassian.net/browse/RHEL-191938 - CVE fix for: CVE-2026-56001, CVE-2026-56002, CVE-2026-56003 Resolves: https://redhat.atlassian.net/browse/RHEL-191886 Resolves: https://redhat.atlassian.net/browse/RHEL-191933 Resolves: https://redhat.atlassian.net/browse/RHEL-191938 - CVE fix for: CVE-2026-44950 Resolves: https://redhat.atlassian.net/browse/RHEL-222029 - CVE fix for: CVE-2026-59679 Resolves: https://redhat.atlassian.net/browse/RHEL-221957 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230) - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232) - Fix CVE-2022-4883: compression depends on $PATH (#2160242) - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap - Drop hardening patches from previous version to keep ABI compatibility - Fix CVE-2022-46285: infinite loop on unclosed comments (#2160230) - Fix CVE-2022-44617: runaway loop with width of 0 (#2160232) - Fix CVE-2022-4883: compression depends on $PATH (#2160242) - CVE-2023-43786 libX11: stack exhaustion from infinite recursion in PutSubImage() - CVE-2023-43787 libX11: integer overflow in XCreateImage() leading to a heap overflow - CVE-2023-43788 libXpm: out of bounds read in XpmCreateXpmImageFromBuffer() - CVE-2023-43789 libXpm: out of bounds read on XPM with corrupted colormap - Drop hardening patches from previous version to keep ABI compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix build with newer libX11 Resolves: https://redhat.atlassian.net/browse/RHEL-191382 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix build with newer libX11 Resolves: https://redhat.atlassian.net/browse/RHEL-191382 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Backport upstream MR #1 to fix RHBZ #1888993 (metacity crash) - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libXt 1.2.0 - Work around a gcc10 issue - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - libXt 1.2.0 - Work around a gcc10 issue - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - preserve failed setfacl return code (RHEL-11833) - rebase to 2.4.0 to fix the following CVEs: - CVE-2026-54369 - Symlink traversal privilege escalation via libacl functions (RHEL-186111) - CVE-2026-54370 - TOCTOU Symlink Traversal via getfacl/setfacl (RHEL-186216) - Initial RHEL packaging based on Fedora package with rpmautospec disabled, disabled documentation (no gi-docgen in RHEL 9) and downstream patch to be able to compile with glib2 2.68 (thanks to Milan Crha) - Resolves: RHEL-3234 - Add gating configuration (needs a new build) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1.4.0 Resolves: bz#1968275 - 1.4.1 Resolves: bz#2023181 - Rebuild (Qt 5.15.3) Resolves: bz#2061416 - Bump build to build against correct Qt version Resolves: bz#2061416 - 1.4.2 Resolves: bz#2175754 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix building in C99 mode - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport a patch from upstream to fix handling unknown tags in AppStream metadata - Resolves: #RHEL-34564 - Resolves: CVE-2025-25724 - Resolves: CVE-2025-5914 - Resolves: CVE-2026-4111 - Release bump - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - Resolves: CVE-2026-14164 - Related: CVE-2026-14164 - Resolves: CVE-2025-25724 - Resolves: CVE-2025-5914 - Resolves: CVE-2026-4111 - Release bump - Resolves: CVE-2026-4424 - Resolves: CVE-2026-5121 - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - add BR for perl(FileHandle) needed by %check - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - new upstream release - new upstream release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Workaround __openat_missing_mode compiler error. (Keith Seitz, RH BZ 1890813) - Remove workaround for 1890813 now that binutils is fixed. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bumped NVR to release subpackage Related: rhbz#2058409 - Use getaddrinfo instead of gethostbyname. (Keith Seitz) - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - lscpu: update tests, follow max freq for scaling (RHEL-12783) - lscpu: another tests update (RHEL-12783) - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-132706 - use sysusers.d for uuidd - Import Fedora rpm 1.2.2-4 spec file with license updates (https://src.fedoraproject.org/rpms/libblkio/pull-request/1) - Remove %setup -q /usr/bin/git init -q /usr/bin/git config user.name "rpm-build" /usr/bin/git config user.email "<rpm-build>" /usr/bin/git config gc.auto 0 /usr/bin/git add --force . /usr/bin/git commit -q --allow-empty -a\ --author "rpm-build <rpm-build>" -m "libblkio-1.5.0 base" - Update to 1.3.0, which simplifies the license expression due to crate dependency changes. - Update to 1.5.0 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - Rebuild with LLVM 18 (RHEL-28684) - Fic bio* tools (RHEL-61615) - Explicitely disable blazesym support (RHEL-49640) - Fix gating tests of libbpf gating. - Rebase to the latest version (RHEL-63883) - Rebuild with libbpf 1.5.0 - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Rebuild with LLVM 21 (RHEL-108343) - Fix upgrades from non-alternativized versions/packages - Fix upgrades from non-alternativized versions/packages - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek) - src/gettext: fix warning if gettext is already present (giulio.benetti) - Update README.md (vpodzime) - fix build on shells where test == fails (tbier) - Add POT file to git and do not rebuild it during every build (vtrefny) - Fix memory leak in bs_size_new_from_str (vtrefny) - Translated using Weblate (Turkish) (oguzersen) - add translation platform widget (jean-baptiste) - Update translation files (noreply) - Do not regenerate POT file during 'make release' (vtrefny) - Remove Zanata from our build and release processes (vtrefny) - Add PO files to git (vtrefny) - Sync spec with downstream (vtrefny) - Rebuilt for Python 3.9 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add Travis build status badge (vtrefny) - Add Travis CI config and Dockerfiles for running tests (vtrefny) - Add ansible playbook for installing test dependencies (vtrefny) - remove msgcat dependency (Aduskett) - Translated using Weblate (Bengali (India)) (akarshan.biswas) - Update translation files (noreply) - Added translation using Weblate (Bengali (India)) (akarshan.biswas) - Fix library version in pkgconfig file (vtrefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Translated using Weblate (Hebrew) (sh.yaron) - Added translation using Weblate (Hebrew) (sh.yaron) - Add support to ppc64le for debian build (74309971+gururajrkatti) - Translated using Weblate (Finnish) (ricky.tigg) - tools: Read input from stdin when not running in a tty (vtrefny) - travis: Print logs after failed tests (vtrefny) - tests: Run pylint and pycodestyle on bscalc (vtrefny) - bscalc: Add option to print only single "human readable" result (vtrefny) - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny) - Translated using Weblate (Asturian) (fitoschido) - Update translation files (noreply) - Translated using Weblate (Spanish) (fitoschido) - Sync spec with downstream (vtrefny) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add -q option to disable warnings. Resolves: rhbz#2222172 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add -q option to disable warnings. Resolves: rhbz#2222172 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add -q option to disable warnings. Resolves: rhbz#2222172 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add -q option to disable warnings. Resolves: rhbz#2222172 - Fix typos in the cap_from_text.3 man page Resolves: RHEL-1838 - Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878) Resolves: RHEL-169312 - New upstream feature release - New upstream bugfix release - Add temporary patch disabling bounding set error codes - New upstream bugfix release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add syslog warning for bad use of capng_apply - Adjust syslog warning for bad use of capng_apply - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update apply-disable patch (#2045857) Resolves: rhbz#2045857 - New upstream feature release - New upstream bugfix release - Add temporary patch disabling bounding set error codes - New upstream bugfix release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add syslog warning for bad use of capng_apply - Adjust syslog warning for bad use of capng_apply - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update apply-disable patch (#2045857) Resolves: rhbz#2045857 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - updated to 2.1.0 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - updated to 10.2+2.0.1 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for ICU 65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - new upstream release - Rebuild for ICU 67 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - new upstream release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Boost 1.73 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for Boost 1.75 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for removed libstdc++ symbol (#1937698) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Change the xattr entry hash to use an unsighed char by default - Related: RHEL-10467 - rebuild to incorporate libss-devel package - Related: RHEL-19059 - Bump release to perform build verification for gating changes - Related: RHEL-71250 - Fix: e2fsprogs: online resize fails - Related: RHEL-76095 - ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes - provide common cleanup method for push headers (CVE-2024-2398) - make up incomplete patch for host name wildcard checking (RHEL-5675) - eliminate use of obsolete patch syntax (RHEL-65791) - http2: make sure pause is done on HTTP (RHEL-85847) - noproxy: support proxies specified using cidr notation (RHEL-81412) - revert several disabled tests related to openssl/valgrind (RHEL-99465) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121659 - rebuild for c9s (RHEL-125838) - openssl: respect system crypto policy for TLS max version (RHEL-128914) - http: fix crash in rate-limited upload (RHEL-131696) - openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721) - openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721) - cookie: don't treat the leading slash as trailing (CVE-2025-9086) Resolves: RHEL-121659 - rebuild for c9s (RHEL-125838) - openssl: respect system crypto policy for TLS max version (RHEL-128914) - http: fix crash in rate-limited upload (RHEL-131696) - openssl: fix libssh compatibility in crypto-policy patch (RHEL-134721) - openssl: fix libssh compatibility by preserving original SSL_CTX behavior (RHEL-134721) - fix SSH host key mismatch on type difference (CVE-2026-9547) - fix TLS/STARTTLS connection reuse vulnerability (CVE-2026-8286) - tests: disable flaky tests 3000, 3001 on i686 (stunnel startup race) - fix HTTP Negotiate connection reuse auth bypass (CVE-2026-1965) - fix OAuth2 bearer token leak via redirect and netrc (CVE-2026-3783) - tests: disable flaky test 1206 on x86_64 (FTP PORT timeout under valgrind) - fix missing %patch macros for Patch46 and Patch47 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fixes FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.2.13 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild the package - Resolves: #1973518 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fixes FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.2.13 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild the package - Resolves: #1973518 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship libdazzle-devel in CRB Resolves: RHEL-126955 - Add db_converter into -utils subpackage - It allowes to convert BerkeleyDB database format to GDBM/LMDB format - Resolves: RHEL-35607 - Rebase db_converter tool to the latest version - Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets - Adress rpminspect issue - missing debuginfo for db_converter - Add db_converter into -utils subpackage - It allowes to convert BerkeleyDB database format to GDBM/LMDB format - Resolves: RHEL-35607 - Rebase db_converter tool to the latest version - Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets - Adress rpminspect issue - missing debuginfo for db_converter - Initial Fedora packaging - Version bump for resync - Version bump for rebuild - Update to 0.1.1 Resolves: rhbz#2140414 - Rebuild for CRB Resolves: RHEL-120218 - Rebuild for CRB again, tpelka messed up Resolves: RHEL-120218 - Update to 2.4.120 - Fix findings from static application security testing (SAST) - Update to 2.4.121 - Update to 2.4.123 Resolves: https://issues.redhat.com/browse/RHEL-53869 - Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches") libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x Resolves: https://issues.redhat.com/browse/RHEL-53869 - Update to 2.4.127 amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs - Added amdgpu-slice.patch and amdgpu-fallback.patch - Update to 2.4.128-1 - update to 6.0.1 (#1761253) - use gpgverify macro - rebuild for libdvdread ABI bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 6.1.0 (#1815805) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 6.0.2 (#1761254) - use new gpgverify macro - track ABI to avoid accidental bumps - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 6.1.1 (#1815806) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-30780 - New release: v1.26 - When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too. - Print number of holes, bit holes and bit paddings in class member types. - Introduce --contains_enumerator=ENUMERATOR_NAME: - Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum". - Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF. - Fix loading DW_TAG_subroutine_type generated by the Go compiler. - Fix loading of 32-bit signed enums from BTF. - Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding. - Parallelize loading BTF and DWARF, speeding up a bit btfdiff. - Do type expansion to cover "private" types and enumerations in btfdiff. - New release: v1.27 - Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result. - Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file. - Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it. - Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output. - Fix hole discovery with inheritance in C++. - Backport upstream bugfixes for clang builds Resolves: RHEL-54022 - New release: 1.30 - Better detection of abort during DWARF loader thread processing - pahole now detects presence of libbpf APIs and BTF features using weak function declarations when built using a shared library libbpf - Type tags are emitted for BPF arena pointers with new BTF "attributes" feature - New release: 1.29 - Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads. - The BTF encoding now is always reproducible, and as fast/faster than before. - The memory consumption is reduced. - Support for multiple BTF_DECL_TAGs pointing to same tag. - Verify that pfunct prints btf_decl_tags read from BTF. - Don't print functions twice when using 'pfunct -f function_name'. - New release: 1.28 - Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding. - Show flexible arrays statistics - Add '--padding N' and '--padding_ge N' to show structs with paddings - Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel. - Don't stop pfunct output at the first function that matches a filter, show all of them - Allow encoding data about all global variables, not just per CPU ones - Handle .BTF_ids section endianness, fully supporting cross builds - Generate decl tags for bpf_fastcall for eligible kfuncs - Add "distilled_base" BTF feature to split BTF generation. - Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization - Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var - Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var - Serialize access to elfutils dwarf_getlocation(). - Honour --lang_exclude when merging LTO built CUs. - Add the debuginfod client cache directory to the vmlinux search path. - Print the CU's language when a tag isn't supported. - Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags. - Improve the parameter parsing by checking DW_OP_[GNU_]entry_value - Introduce a tests/ directory with regression tests - Rework the selection of functions to represent in BTF, for instance: - Skip functions that passes values thru the stack when those structs don't have expected alignment due to some attribute usage that then causes problems with BTF trampolines due to lack of expressiveness in BTF to signal such special cases. - Skip objects (compile units) without DWARF: don't stop a multi object encoding session just because one doesn't have any DWARF in it. - Fix BTF dedup by updating libbpf. - Fix the inference of the explicit alignment attribute of zero length arrays, like struct skb_ext->data[] in the Linux kernel. Important as BTF has no no explicit alignment attribute encoding. - Fix the inference of alignments after bitfields, such as in struct nft_rule_dp->data[] after ->handle:42, also in the Linux kernel. - Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct. - Add comparision of functions encoded in BTF between baseline 'master' branch and current branch, i.e. 'next'. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable parallel build - Resolves: #1975438 - Add -j1 also into build section - Resolves: #1975438 - Rebase to upstream release 13.5 - Fix removing of readline callback handler (RHEL-133732) - Update to 0.35 - Update to 0.36 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.38 - Update to 0.39 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Avoid use of inet_ntoa(). Related: rhbz#1967524 - Update to 0.41. Related: rhbz#1967524 - add gating test that uses acd-client.c. Related: rhbz#1973511 - drop tests dependency on libell-devel. Related: rhbz#1973511 - bump NVR to trigger CI - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - epoxy.pc: -Requires.private: gl egl (#1744320) - Rebuild for libglvnd 1.2, drop work-arounds - Update to 1.5.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.5.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - epoxy.pc: -Requires.private: gl egl (#1744320) - Rebuild for libglvnd 1.2, drop work-arounds - Update to 1.5.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.5.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Resolves:rh#1747737 packages with conflicts - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly, not xorg-x11-font-utils (#1933537) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1973542 Add gating tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Add a substitute config for ArialMT again. Resolves: RHEL-2273 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 0.1.11 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild libestr to include devel package in the CRB resolves: rhbz#2071651 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - add fix for contemporary glm - fix build with latest boost - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - new upstream release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - libevdev 1.9.1 - this time with sources - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - libevdev 1.10 rc1 - libevdev 1.10 rc2 - libevdev 1.10.0 - libevdev 1.10.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - libevdev 1.11.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Patch duplicate file descriptor manipulation - Resolves: RHEL-26128 - Rework the patch from 2.1.12-7 to prevent ABI changes. - Related: RHEL-26128 - Patch duplicate file descriptor manipulation - Resolves: RHEL-26128 - Rework the patch from 2.1.12-7 to prevent ABI changes. - Related: RHEL-26128 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 0.6.22 - .spec cleanup - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix integer underflow in MakerNote decoding (CVE-2026-40386) - Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385) Resolves: RHEL-170253, RHEL-170234 - Ship libexttextcat-devel in CRB Resolves: RHEL-126949 - Update to upstream 1.22.0 - Resolves: RHEL-46648 - Update to upstream 2.1.0 - Resolves: RHEL-73064 - Update to upstream 2.3.1 - Resolves: RHEL-97660, RHEL-97651, RHEL-90252 - bump release to rebuild in sidetag - Resolves: RHEL-97660, RHEL-97651, RHEL-90252 - Rebuilt for RHEL-9.8 - Resolves: RHEL-97660, RHEL-97651, RHEL-90252 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Address CVE-2020-12762 Resolves: rhbz#2203172 - Rebuild Resolves: rhbz#2227786 - Use __cc macro instead of hard-coding gcc - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upstream patch to fix gcc-10 build - Update to 1.6.0 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Gating rebuild [bz#1974188] - Resolves: bz#1974188 (Define tests, including gating tests, for dtc) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to libffi 3.4.2. - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Add temporary compat-libffi3.1 for library transition. - Drop pkgconf support for compat-libffi3.1. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Remove compat-libffi3.1 subpackage to complete SONAME transition. Related: rhbz#1891914 - Use /etc/sysconfig/libffi-force-shared-memory-check-first to override selinux permissions check for shared memory access (#2152228) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - Allow signature verification with smaller RSA keys (#2083846) - Allow short salt for KDF (#2114870) - Reseed the kernel DRBG by using GRND_RANDOM (#2118695) - Address FIPS review comments around selftests (#2118695) - Disable RSA-OAEP in FIPS mode (#2118695) - Fix SHA3 digests with large inputs (#2129150) - Fix FIPS RSA PCT (#2128455) - Fix RSA FIPS Keygen that non-deterministically fails (#2130275) - Get max 32B from getrandom in FIPS mode (#2130275) - Properly enforce KDF limits in FIPS mode (#2130275) - Fix memory leak in large digest test (#2129150) - Fix function name FIPS service indicator by disabling PK encryption and decryption (#2130275) - Skip RSA encryption/decryption selftest in FIPS mode (#2130275) - Fix unneeded PBKDF2 passphrase length limitation in FIPS mode - Enforce HMAC key lengths in MD API in FIPS mode - Avoid usage of invalid arguments sizes for PBKDF2 in FIPS mode - Do not allow large salt lengths with RSA-PSS padding - Disable X9.31 key generation in FIPS mode - Update the FIPS integrity checking code to upstream version - Update cipher modes FIPS indicators for AES WRAP and GCM - Disable jitter entropy generator - Provide FIPS indicators for MD and HMACs - Improve PCT tests for ECDSA and always run them after key is generated - Add missing guards for FIPS status in md_sign/verify function - Provider FIPS indicators for public key operation flags - Fix CVE-2024-2236 (RHEL-34579) - Fix CVE-2024-2236 (RHEL-34579) - Fix CVE-2026-41989: Denial of Service and buffer overflow via crafted ECDH ciphertext - Bump version to fix wrong build target. - Minor conditional fixes for ELN - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.17.13 - Remove uhttpmock-devel from BuildRequires on RHEL 9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.18.0 - Update to 0.18.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the unused BuildRequires on liboauth Resolves: #1996380 - Minor conditional fixes for ELN - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.17.13 - Remove uhttpmock-devel from BuildRequires on RHEL 9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.18.0 - Update to 0.18.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop the unused BuildRequires on liboauth Resolves: #1996380 - Update to 0.20.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.20.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.20.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to the latest upstream 0.14.3 (RHEL-88597) - Bump mesa-libGLES obsoletes version as well - Update to 1.3.0 - Update to 1.3.1 - Forward few patches from rhel - Update to 1.3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.3.4 for nvidia drivers - Bump mesa-libGLES obsoletes version as well - Update to 1.3.0 - Update to 1.3.1 - Forward few patches from rhel - Update to 1.3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.3.4 for nvidia drivers - Bump mesa-libGLES obsoletes version as well - Update to 1.3.0 - Update to 1.3.1 - Forward few patches from rhel - Update to 1.3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.3.4 for nvidia drivers - Bump mesa-libGLES obsoletes version as well - Update to 1.3.0 - Update to 1.3.1 - Forward few patches from rhel - Update to 1.3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.3.4 for nvidia drivers - Bump mesa-libGLES obsoletes version as well - Update to 1.3.0 - Update to 1.3.1 - Forward few patches from rhel - Update to 1.3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.3.4 for nvidia drivers - Bump mesa-libGLES obsoletes version as well - Update to 1.3.0 - Update to 1.3.1 - Forward few patches from rhel - Update to 1.3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.3.4 for nvidia drivers - Bump mesa-libGLES obsoletes version as well - Update to 1.3.0 - Update to 1.3.1 - Forward few patches from rhel - Update to 1.3.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.3.4 for nvidia drivers - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - new upstream release 1.37 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release (#1800640) - New upstream release (#1909749) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release (#1941582) - Address coverity reported issues - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Avoid using bad function inet_addr - Update to 2.5.24 release - Add libcurl for Lumix WIFI support - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix configure check for symbol versioning with GCC 10 (rhbz #1862745) - New upstream release 2.5.25 (#1839543) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release 2.5.26 (#1887201) - Add support for hwdb output (#1658259) - New upstream release 2.5.27 (#1931187) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.5.1 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.5.2 - Update to 1.5.3 - Update to 1.6 - Update to 1.6.1 - Update to 1.6.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.3 - Update to 1.5.1 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.5.2 - Update to 1.5.3 - Update to 1.6 - Update to 1.6.1 - Update to 1.6.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.3 - Update to 1.5.1 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.5.2 - Update to 1.5.3 - Update to 1.6 - Update to 1.6.1 - Update to 1.6.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.3 - Update to 1.5.1 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.5.2 - Update to 1.5.3 - Update to 1.6 - Update to 1.6.1 - Update to 1.6.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.3 - fix for CVE-2023-36664 - Resolves: rhbz#2217810 - fix for CVE-2023-38559 - Resolves: rhbz#2224372 - fix for CVE-2023-43115 - Resolves: RHEL-10185 - RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library - RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths - RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction - RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass) - RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable() - RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space - RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding - RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript - RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution - RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release 1.14.47 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Avoid use of deprecated networking functions (#2050712) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + libgudev-234-1 - Update to 234 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild + libgudev-236-1 - Update to 236 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 + libgudev-237-1 - Update to 237 - Resolves: rhbz#1995044 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Rebase to ntfs-3g 2021.8.22 resolves: rhbz#2002985 - Rebase to ntfs-3g 2022.5.17 - Fixes: CVE-2021-46790, CVE-2022-30783, CVE-2022-30784, CVE-2022-30785, CVE-2022-30786, CVE-2022-30787, CVE-2022-30788, CVE-2022-30789 resolves: rhbz#2127235 rhbz#2127242 (also 2127264 2127250 2127257) - Rebase to ntfs-3g 2022.10.3 - Fixes: CVE-2022-40284 - resolves: rhbz#2236376 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le + libgweather-3.36.1-1 - Update to 3.36.1 - Work-around broken current conditions weather servers - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 40.alpha - Update to 40.alpha.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 + libgweather-3.36.1-1 - Update to 3.36.1 - Work-around broken current conditions weather servers - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 40.alpha - Update to 40.alpha.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.3.2 upstream release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship libhandy-devel in CRB Resolves: RHEL-126951 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Iniital build - Update to 1.0.3 - Iniital build - Update to 1.0.3 - Rebase to upstream release v51.0 - Resolves: RHEL-24473, RHEL-23180 - Rebase to upstream release v54.0 - Resolves: RHEL-52886, RHEL-54647, RHEL-51876 - Fix data corruption in bnxt_re - Resolves: RHEL-89179 - Rebase to upstream release v57.0 - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449 - Fix pyverbs tests - Resolves: RHEL-107929, RHEL-107930 - Rebase to upstream release v60.0 - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v61.0 - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebuilt for gating testing - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Use CMake macros for the build - Change how python tests are invoked (RH bug #1865924) - Update to 3.0.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1953449 (Update to 3.0.10) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014989 (Update to 3.0.11) - Resolves: #2031657 (Update to 3.0.12) - Resolves: #2041724 (Update to 3.0.13) - Resolves: #2054087 (Update to 3.0.14) - Use CMake macros for the build - Change how python tests are invoked (RH bug #1865924) - Update to 3.0.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1953449 (Update to 3.0.10) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014989 (Update to 3.0.11) - Resolves: #2031657 (Update to 3.0.12) - Resolves: #2041724 (Update to 3.0.13) - Resolves: #2054087 (Update to 3.0.14) - Use CMake macros for the build - Change how python tests are invoked (RH bug #1865924) - Update to 3.0.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1953449 (Update to 3.0.10) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014989 (Update to 3.0.11) - Resolves: #2031657 (Update to 3.0.12) - Resolves: #2041724 (Update to 3.0.13) - Resolves: #2054087 (Update to 3.0.14) - Use CMake macros for the build - Change how python tests are invoked (RH bug #1865924) - Update to 3.0.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1953449 (Update to 3.0.10) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014989 (Update to 3.0.11) - Resolves: #2031657 (Update to 3.0.12) - Resolves: #2041724 (Update to 3.0.13) - Resolves: #2054087 (Update to 3.0.14) - ICU-22973 Fix buffer overflow by using CharString Resolves: RHEL-96664 - Upgrade to 2.3.0 (#1764345, #1772703) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Touch a couple autoconf related files to prevent undesired rebuilding if %configure changes one or more configure files. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add quirks for four more dell touchpads (RHEL-69798) - Add support for the Wacom Intuos Pro (RHEL-105483) - Rename existing patches for better order clarity - Fix crash when the Wacom Intuos Pro 3rd gen sends absolute wheel events - Handle BTN_STYLUS3 (RHEL-147703) - Add quirks for four more dell touchpads (RHEL-69798) - Add support for the Wacom Intuos Pro (RHEL-105483) - Rename existing patches for better order clarity - Fix crash when the Wacom Intuos Pro 3rd gen sends absolute wheel events - Handle BTN_STYLUS3 (RHEL-147703) - Rebuild to get -devel in compose - Resolves: RHEL-45353 - Disable RDMA on arm 32-bit (rhbz #1778517) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.9.0 git snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable RDMA on arm 32-bit (rhbz #1778517) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.9.0 git snapshot - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix upgrades from non-alternativized versions/packages - Fix upgrades from non-alternativized versions/packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upgrade to 1.5.4 (#1926007) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix URLs Resolves: #1967489 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Upgrade to 1.5.4 (#1926007) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix URLs Resolves: #1967489 - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - Rebase jose-14 upstream version Resolves: #RHEL-38079 - Fix CVE-2021-46822 - Resolves: CVE-2021-46822 - Fix CVE-2021-29390 - Resolves: RHEL-5413 - Fix CVE-2021-46822 - Resolves: CVE-2021-46822 - Fix CVE-2021-29390 - Resolves: RHEL-5413 - Fix CVE-2021-46822 - Resolves: CVE-2021-46822 - Fix CVE-2021-29390 - Resolves: RHEL-5413 - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.5.2 - Use SPDX license identifiers - Fix documentation build to be properly be noarch - Add gating.yaml to RHEL9 libkdumpfile - Add tests/ directory - Rebase to upstream v0.5.4 Resolves: RHEL-67143 - Rebase to upstream v0.5.5 Resolves: RHEL-86262 - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to 0.5.2 - Use SPDX license identifiers - Fix documentation build to be properly be noarch - Add gating.yaml to RHEL9 libkdumpfile - Add tests/ directory - Rebase to upstream v0.5.4 Resolves: RHEL-67143 - Rebase to upstream v0.5.5 Resolves: RHEL-86262 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Suppress documentation in Flatpak builds - build gir with non-parallel to avoid strange behavior. - Update License field for liblangtag-data. It is actually Unicode but not UCD. - Add gcc buildrequires - Use make macros - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add CI test. Resolves: rhbz#2008783 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Suppress documentation in Flatpak builds - build gir with non-parallel to avoid strange behavior. - Update License field for liblangtag-data. It is actually Unicode but not UCD. - Add gcc buildrequires - Use make macros - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add CI test. Resolves: rhbz#2008783 - Add skipempty to liblognorm json type resolves: rhbz#1990737 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild resolves: rhbz#2227729 - Add skipempty to liblognorm json type resolves: rhbz#1990737 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild resolves: rhbz#2227729 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2023-26767 (#2181147) - Fix CVE-2023-26768 (#2181151) - Fix CVE-2023-26769 (#2181149) - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - New upstream release v10 Resolves: RHEL-122139 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-30424 - Addressing findings from static application security testing - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add cve-2023-27371.patch Related: rhbz#2174640 CVE-2023-27371 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add gating.yaml - Release bump - Fix gating.yaml - Release bump - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - lscpu: update tests, follow max freq for scaling (RHEL-12783) - lscpu: another tests update (RHEL-12783) - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-132706 - use sysusers.d for uuidd - Make mpfr3 and mpfr3-devel subpackages - Drop the compat-libmpc package; nothing in Fedora needs it - Update project URL - Add a -doc subpackage to hold the GFDL-licensed content - Drop unnecessary texinfo BR - Drop ldconfig_scriptlets; this version cannot appear in distros that need it - Make sure there are no rpaths and that -Wl,--as-needed takes effect - Build the main package against mpfr4 - Drop the libmpc-mpfr3 and libmpc-mpfr3-devel subpackages - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to libmpc version 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Make mpfr3 and mpfr3-devel subpackages - Drop the compat-libmpc package; nothing in Fedora needs it - Update project URL - Add a -doc subpackage to hold the GFDL-licensed content - Drop unnecessary texinfo BR - Drop ldconfig_scriptlets; this version cannot appear in distros that need it - Make sure there are no rpaths and that -Wl,--as-needed takes effect - Build the main package against mpfr4 - Drop the libmpc-mpfr3 and libmpc-mpfr3-devel subpackages - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upgrade to libmpc version 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for ICU 65 - Fix missing #include for gcc-10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable player match that breaks Bluetooth on Mediatek MT7925 adapters (RHEL-140110) - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - new upstream release - new upstream release - new upstream release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - rhbz#2031658 merge in fedora 34 changes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuild for versioned symbols in json-c - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - add gating.yaml file - add provides for fastapprox library #2064301 - add provides for rng-double library #2064301 - Rebase to 1.16.0 resolves: rhbz#2168628 - Rebase to 1.18.1 resolves: RHEL-14476 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Rebase to 1.20.0 resolves: RHEL-31883 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to libnbd 1.20.3 - Add nbdcopy --blkhash option resolves: RHEL-85509 - Rebase to 1.16.0 resolves: rhbz#2168628 - Rebase to 1.18.1 resolves: RHEL-14476 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Rebase to 1.20.0 resolves: RHEL-31883 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to libnbd 1.20.3 - Add nbdcopy --blkhash option resolves: RHEL-85509 - Apply upstream patch to fix 3 findings from static application security testing Resolves: RHEL-27656 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute - examples: kill the "invalid argument" error in nftc-helper-add - examples: fix double free in nftc-helper-add - include: Sync with kernel headers - src: fix use after free - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - extra: use inet_ntop instead of inet_ntoa - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase onto upstream version 1.0.5 - Update to 3.8.0 release (RHEL-17843) - Update to 3.9.0 release (RHEL-17843) - Update to 3.11.0 release (RHEL-67129) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.8.32 release - Update to 1.8.36 release (rh #2066742) - Include OWE wireless security (rh #2066737) - Fix OWE wireless security entry in Hidden Networks dialog (rh #2057512) - Rebuilt (outage) - Update to 1.8.38 release - Update to 1.8.40 release - Demote WEP (rh #2030997) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix inconsistent IDs in specification (#1915831) - Make notify-send return failure when it fails Resolves: #2017158 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix inconsistent IDs in specification (#1915831) - Make notify-send return failure when it fails Resolves: #2017158 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upstreal released new version 1.3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to upstream 2.0.0 release - Resolves: rhbz#2039220 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - latest version - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 1.3.4 - include soname in file list - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - replace -DSIZEOF_VOID_P=4 with upstream solution - reenable make check - latest release - Fix missing headers for gcc-11 - build without libixion under rhel - fix build without libixion under rhel - Rebuilt for Boost 1.75 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.0 release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Improve error message on failure to access database due permission Related: rhbz#1942431 - Warn on EACCES error when skipMissing is set Resolves: rhbz#2051559 - Update to 1.10.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.1.28 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + libpeas-1.26.0-5 - Remove unused Python macro that caused errors on install (#1863667) - Update to 1.28.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.30.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + libpeas-1.30.0-3 - Correct license for some of the icons - Resolves: rhbz#1971434 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + libpeas-1.26.0-5 - Remove unused Python macro that caused errors on install (#1863667) - Update to 1.28.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.30.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + libpeas-1.30.0-3 - Correct license for some of the icons - Resolves: rhbz#1971434 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add libpfm-ibm-counters.patch - Add libpfm-ibm-counters.patch - Disable parallel build - Resolves: #1975438 - Add -j1 also into build section - Resolves: #1975438 - Rebase to upstream release 13.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.4.91 - improve full pinyin auto correction - bug fixes - Update to 2.4.92 - update pinyin data - bug fixes - Update to 2.6.0 - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.4.91 - improve full pinyin auto correction - bug fixes - Update to 2.4.92 - update pinyin data - bug fixes - Update to 2.6.0 - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE-2025-64720: buffer overflow (RHEL-131594) - CVE-2025-65018: heap buffer overflow (RHEL-131603) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411) - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299) - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448) - CVE-2025-64720: buffer overflow (RHEL-131594) - CVE-2025-65018: heap buffer overflow (RHEL-131603) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411) - CVE-2025-64720: buffer overflow (RHEL-131594) - CVE-2025-65018: heap buffer overflow (RHEL-131603) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411) - fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299) - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448) - CVE-2025-64720: buffer overflow (RHEL-131594) - CVE-2025-65018: heap buffer overflow (RHEL-131603) - CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294) - fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356) - fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148404) - fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148412) - fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161449) - Update to 13.15 - Update to 13.20 - Rebase to upstream release 13.23 - Resolves: RHEL-131279 (CVE-2025-12818) - Update to 13.15 - Update to 13.20 - Rebase to upstream release 13.23 - Resolves: RHEL-131279 (CVE-2025-12818) - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 - Resolves: RHEL-192239 - Add BuildRequires for perl-File-Compare needed by genbki.pl - Related: RHEL-192239 - Update to 13.15 - Update to 13.20 - Rebase to upstream release 13.23 - Resolves: RHEL-131279 (CVE-2025-12818) - Update to 13.15 - Update to 13.20 - Rebase to upstream release 13.23 - Resolves: RHEL-131279 (CVE-2025-12818) - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 - Resolves: RHEL-192239 - Add BuildRequires for perl-File-Compare needed by genbki.pl - Related: RHEL-192239 - Fix PAC buffer overflow (#1883584) - Disable mozjs backend by default, obsolete it by webkit subpackage - Depend on KDE only on Fedora (#1902608) - Tweak KDE conditionals to only apply at runtime - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add Copyright.txt. Resolves: rhbz#1986586 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop pacrunner subpackage. Resolves: rhbz#1990974 - Drop networkmanager subpackage. Resolves: rhbz#1996028 - Fix PAC buffer overflow (#1883584) - Disable mozjs backend by default, obsolete it by webkit subpackage - Depend on KDE only on Fedora (#1902608) - Tweak KDE conditionals to only apply at runtime - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add Copyright.txt. Resolves: rhbz#1986586 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop pacrunner subpackage. Resolves: rhbz#1990974 - Drop networkmanager subpackage. Resolves: rhbz#1996028 - Fix PAC buffer overflow (#1883584) - Disable mozjs backend by default, obsolete it by webkit subpackage - Depend on KDE only on Fedora (#1902608) - Tweak KDE conditionals to only apply at runtime - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add Copyright.txt. Resolves: rhbz#1986586 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop pacrunner subpackage. Resolves: rhbz#1990974 - Drop networkmanager subpackage. Resolves: rhbz#1996028 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix unnecessary build failure due to missing tree_index.sgml in gtk-doc output - update to 0.21.1 (#1858489) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Boost 1.73 - Cleanup conditionals for using python3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - FTBFS fix: %{__python} must now be explicitly defined - Rebuilt for Boost 1.75 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Resolves: #1913613 (Disable DII (and ImageMagic dependency) for RHEL 9) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add patch to correct 'extern "C"' usage - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add async connect call for Pacemaker Resolves: rhbz#bz2031865 - Add gating.yaml from RHEL Resolves: rhbz#bz2031865 - Fix gating.yaml for RHEL-9 Resolves: rhbz#bz2031865 - Bump soname for async-connect API addition Resolves: rhbz#bz2031865 - Fix negative errno in qb_ipcc_connect (introduced in 2.0.3-4) Resolves: rhbz#2057527 - Rebase to 2.0.6 Resolves: rhbz#2072903 - ipc: Retry receiving credentials if the the message is short Resolves: rhbz2149647 - blackbox: fix buffer overflow with long log lines Resolves: rhbz#2236171 - bump rpm version for rhel-exception build Resolves: rhbz#2230712 - Rebase to 2.0.8 Resolves: rhbz#2223950 - Rebuild for ICU 65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2215766, insecure credentials submission - add missing gating.yaml - fix rpminspect issue Related: #2215766 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2215766, insecure credentials submission - add missing gating.yaml - fix rpminspect issue Related: #2215766 - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13 - disable multiple build options - disable multiple packages - remove unnecessary files - libblk.so -> libblk.a - remove python3-rgw from ceph-common deps - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 16.2.4 - Add libcephsqlite packages - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Apply fmt-header-only patches - Update licence field - Drop unnecessary dependencies - Drop fmt-devel from build requires - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb) - rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13 - disable multiple build options - disable multiple packages - remove unnecessary files - libblk.so -> libblk.a - remove python3-rgw from ceph-common deps - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 16.2.4 - Add libcephsqlite packages - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Apply fmt-header-only patches - Update licence field - Drop unnecessary dependencies - Drop fmt-devel from build requires - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to upstream 1.5.0 resolves: rhbz#1818082 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream 1.6.0 resolves: rhbz#1883910 - Enable all missing features - Fix linking to external lz4 library - Minor spec cleanups - Update to upstream 1.6.1 resolves: rhbz#1932286 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix for rpmlint reporting crypto-policy-non-compliance-openssl resolves: rhbz#2032923 - Add missing tests Related: rhbz#2032923 - Changes for tests to compile and run appropriately Related: rhbz#2032923 - Rebase to upstream release v51.0 - Resolves: RHEL-24473, RHEL-23180 - Rebase to upstream release v54.0 - Resolves: RHEL-52886, RHEL-54647, RHEL-51876 - Fix data corruption in bnxt_re - Resolves: RHEL-89179 - Rebase to upstream release v57.0 - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449 - Fix pyverbs tests - Resolves: RHEL-107929, RHEL-107930 - Rebase to upstream release v60.0 - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v61.0 - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebuilt for gating testing - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Replace GNUTLS_SHUT_RDWR by GNUTLS_SHUT_WR when ending TLS connections resolves: rhbz#1990735 - Add patch to comply with crypto policies - Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibByName - Enable openssl resolves: rhbz#1972067 - Rebuild resolves: rhbz#2227723 - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Resolves: rhbz#2182392 CVE-2022-38745 - Fix erroneous libreoffice-ure dependencies - Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing - Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded without prompt via IFrame - Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write - Fix CVE-2023-6185 escape url passed to gstreamer - Fix CVE-2023-6186 check link target protocols - Fix CVE-2024-3044 add notify for script use - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Debrand for AlmaLinux - Fix CVE-2024-6472 remove ability to trust not validated macro signatures in high security - Fix CVE-2025-1080 Filter out more unwanted command URIs - Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of the spec has - Resolves: RHEL-176576 - Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in formula compilation - Resolves: RHEL-186062 - Debrand for AlmaLinux - Drop AnacondaRHEL workflow reference - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version 2.15.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Change the default Bugzilla group - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - Drop AnacondaRHEL workflow reference - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version 2.15.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Change the default Bugzilla group - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - Drop AnacondaRHEL workflow reference - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version 2.15.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Change the default Bugzilla group - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - Drop AnacondaRHEL workflow reference - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version 2.15.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Change the default Bugzilla group - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - Drop AnacondaRHEL workflow reference - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version 2.15.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Change the default Bugzilla group - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - Drop AnacondaRHEL workflow reference - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version 2.15.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Change the default Bugzilla group - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - Drop AnacondaRHEL workflow reference - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version 2.15.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Change the default Bugzilla group - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - Update to 4.15 (RHEL-50006) - Fix auto=ondemand connection initialization with TCP (RHEL-51879) - Make use of Netlink extack for additional error reporting (RHEL-51881) - Fix release number - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461) - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461) - crypto: refcnt struct secret_pubkey_stuff when passing to helper thread (RHEL-68047) - Update libreswan-4.15-whack-fd-refcount.patch to be more complete (RHEL-61461) - Remove libreswan-4.15-whack-fd-refcount.patch (RHEL-61461) - showhostkey: fix regression after RHEL-68047 (RHEL-70842) - Backport fixes for CVE-2026-12413, CVE-2026-50721 and CVE-2026-50722 (RHEL-190120, RHEL-190125, RHEL-190155) - Backport fix for CVE-2026-14957 (RHEL-212107) - Fix CVE-2024-3652 (RHEL-32483) - Bump release to synchronize with el9_5 package - Update to 4.15 (RHEL-50006) - Fix auto=ondemand connection initialization with TCP (RHEL-51879) - Make use of Netlink extack for additional error reporting (RHEL-51881) - Fix release number - pluto: fix refcounting of whack FD at CREATE_CHILD_SA request (RHEL-61461) - pluto: ignore CREATE_CHILD_SA request if crypto is in progress (RHEL-61461) - crypto: refcnt struct secret_pubkey_stuff when passing to helper thread (RHEL-68047) - Update libreswan-4.15-whack-fd-refcount.patch to be more complete (RHEL-61461) - Remove libreswan-4.15-whack-fd-refcount.patch (RHEL-61461) - showhostkey: fix regression after RHEL-68047 (RHEL-70842) - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2023-38633 (#2224947) - Specify bundled crates (RHEL-4102) - Fix CVE-2023-38633 (#2224947) - Specify bundled crates (RHEL-4102) - Fix CVE-2023-38633 (#2224947) - Specify bundled crates (RHEL-4102) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - make is no longer in buildroot by default - use smaller git-core instead of git - 1890866 - sane-airscan-0.99.19 is available - 1900160 - sane-airscan-0.99.20 is available - 1897935 - Crash on libsane-airscan when trying to activate scanner - 0.99.21 - 1906510 - sane-airscan-0.99.22 is available - 1914565 - sane-airscan-0.99.23 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1922563 - sane-airscan-0.99.24 is available - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1925259 - %pre scriptlet enables and starts cups.service, which is unnecessary - 1919556 - hp-fab crashed: QFileDialog.getOpenFileName is not used correctly - remove the old search algorithm - get out of hp-setup if the device is a standalone scanner - 1929977 - hplip-3.21.2 is available - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1969767 - remove redundant files - add hplip-repack.sh as a source - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add AlmaLinux support - fix permission for custom created gpg dir - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - OSH fixes after CVE-2026-8631 - Fix more leaks in hpcups - Аdd AlmaLinux support - Fix permission for custom created gpg dir - CVE-2026-8632 hplip: Privilege escalation and arbitrary code execution via OS command injection in Is_Process_Running() - CVE-2026-8631 hplip: HPLIP: Arbitrary code execution and privilege escalation via integer overflow in hpcups - OSH fixes after CVE-2026-8631 - Fix more leaks in hpcups - RHEL-192001 CVE-2026-14544 hplip: Incomplete Fix for CVE-2026-8631 - Аdd AlmaLinux support - Fix permission for custom created gpg dir - Bump release to address sbc-devel inclusion to CRB Resolves: RHEL-105435 - New upstream version (#1765314) - Modernize spec - Backport fix for missing __SNR_ppoll symbol (#1777889) - Refresh patch to build on aarch64 with upstream version - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream version (#1858965) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Apply fixes to change internal handling of the notification fd (#1865802) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix devel-usability test - rebase to 2.5.2 resolves: rhbz#2019887 - Update to 0.20.0 - Update to 0.20.1 - Update to 0.20.2 - Drop gnome-keyring recommends again (#1781864) - Update to 0.20.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.20.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.20.0 - Update to 0.20.1 - Update to 0.20.2 - Drop gnome-keyring recommends again (#1781864) - Update to 0.20.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.20.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - SELinux userspace 3.5-rc3 release - SELinux userspace 3.5 release - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - restorecon: Include <selinux/label.h> (RHEL-50821, RHEL-54385) - Close old selabel handle when setting a new one (RHEL-76472) - SELinux userspace 3.5-rc3 release - SELinux userspace 3.5 release - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - restorecon: Include <selinux/label.h> (RHEL-50821, RHEL-54385) - Close old selabel handle when setting a new one (RHEL-76472) - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - sepol_compute_sid: Do not destroy uninitialized context (RHEL-28964) - Fix static analyzer issues (RHEL-28966) - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - sepol_compute_sid: Do not destroy uninitialized context (RHEL-28964) - Fix static analyzer issues (RHEL-28966) - Fix linking of gssapi to support kerberos - Resolves: RHEL-6802 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 2.4.3 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Release bump due to dropped autotools patch Resolves: rhbz#1956444 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.10.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.10.4 - Switch to meson build system - Update upstream URL - Tighten soname globs - Update to 2.10.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, and aarch64 flags Related: rhbz#1991688 - Update to 2.10.7 - Fix NEWS file to not be executable - Backport upstream commit b09dbd9557 ("ip: Enforce strict aliasing") Fixes JIRA RHEL-27868 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612) - apply patch for CVE-2026-37555 Resolves: RHEL-174543 - fix crash in ogg vorbis (#RHEL-65096) (CVE-2024-50612) - apply patch for CVE-2026-37555 Resolves: RHEL-174543 - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532 Resolves: RHEL-67069 Resolves: RHEL-67081 - Enable tests in check, and add patches to fix tests Resolves: RHEL-76426 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85909 Resolves: RHEL-85915 Resolves: RHEL-85920 Resolves: RHEL-87058 Resolves: RHEL-87068 Resolves: RHEL-87101 Resolves: RHEL-87119 Resolves: RHEL-88360 Resolves: RHEL-88363 - Backport patches for various CVEs Resolves: RHEL-84797 Resolves: RHEL-85888 Resolves: RHEL-87080 Resolves: RHEL-92284 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Backport patch for CVE-2025-14523 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-5119 - Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532 Resolves: RHEL-67069 Resolves: RHEL-67081 - Enable tests in check, and add patches to fix tests Resolves: RHEL-76426 - Backport patches for various CVEs, plus test improvements Resolves: RHEL-85909 Resolves: RHEL-85915 Resolves: RHEL-85920 Resolves: RHEL-87058 Resolves: RHEL-87068 Resolves: RHEL-87101 Resolves: RHEL-87119 Resolves: RHEL-88360 Resolves: RHEL-88363 - Backport patches for various CVEs Resolves: RHEL-84797 Resolves: RHEL-85888 Resolves: RHEL-87080 Resolves: RHEL-92284 - Backport patch for CVE-2025-4945 and CVE-2025-11021 - Backport patch for CVE-2025-14523 - Backport patch for CVE-2026-0719 - Fix NTLM authentication test failures in FIPS mode - Backport patch for CVE-2026-1761 - Backport patch for CVE-2026-5119 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.2.9 - Resolves: #1832567 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Set alignment for rendering to default - Resolves: #2029329 - Update to 20190731. Fixes bug #1742423 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 20200505 version (#1831576) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix NSS incompatibility, thanks to George Joseph Resolves: rhbz#2211526 - Bump up the version so that the version in 9.3 is lower. - Resolves: RHEL-19310, RHEL-19691, RHEL-17245 - Fix CVE-2025-5318 Resolves: RHEL-111732 - Bump spec to make the 9.7 NVR higher than the 9.6 one - Fix CVE-2025-5987 Resolves: RHEL-130051 - Workaround sshd failure rate limiting in tests Resolves: RHEL-135506 - Bump spec to resolve build tagging issues - Resolves: RHEL-150661 - Resolves: CVE-2025-4877 - Resolves: CVE-2025-4878 - Resolves: CVE-2025-5351 - Resolves: CVE-2025-8114 - Resolves: CVE-2025-8277 - Resolves: CVE-2026-0964 - Resolves: CVE-2026-0965 - Resolves: CVE-2026-0966 - Resolves: CVE-2026-0967 - Resolves: CVE-2026-0968 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Backport the fix for CVE-2024-12133 (RHEL-78580) - Backport the fix for CVE-2025-13151 (RHEL-139568) - Backport the fix for CVE-2024-12133 (RHEL-78580) - Backport the fix for CVE-2024-12133 (RHEL-78580) - Backport the fix for CVE-2025-13151 (RHEL-139568) - Backport the fix for CVE-2024-12133 (RHEL-78580) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use new macros, update config.\* locations - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - rebuild - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387) - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - rebuild - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - rebuild - fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387) - fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931) - fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337) - backport documentation change for CVE-2023-52355 (RHEL-17328) - fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543) - fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238) - fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331) - rebuild - Remove regions from the map Resolves: rhbz#2097831 - Add libtimezonemap-devel to CRB Resolves: RHEL-13916 - Harden libltdl loaders (RHEL-39991) - Backport "tpm2: Return TPM_RC_VALUE upon decryption failure" Resolves: RHEL-58056 - Fix CVE-2025-49133 Resolves: RHEL-96258 - Fix CVE-2025-49133 (build for 9.7) Resolves: RHEL-96254 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.1.0.rc, based on earlier tracker3 packaging - Obsolete separate tracker3 packages - Obsolete libtracker-control and libtracker-miner - Add conflicts with tracker3 packages to help with the upgrade path - Update to 3.1.0 - Update to 3.1.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.1.2 - Ship tracker-devel in CRB - Backport module-based libsoup support Resolves: rhbz#2137366 - Fix GTS version in package name. - update from releases/gcc-15 branch - GCC 15.1 release - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407 - update from releases/gcc-15 branch - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938, c++/119939, c++/119981, c++/119996, c++/120012, c++/120013, c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891, fortran/102900, fortran/119928, fortran/119986, fortran/120049, fortran/120107, fortran/120139, fortran/120163, fortran/120179, fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146, libfortran/120152, libfortran/120153, libfortran/120158, libfortran/120196, libstdc++/118260, libstdc++/119427, libstdc++/119714, libstdc++/120029, libstdc++/120114, libstdc++/120159, libstdc++/120187, libstdc++/120190, libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914, modula2/119915, modula2/120117, modula2/120188, preprocessor/116047, preprocessor/120061, target/119610, testsuite/119909, tree-optimization/111873, tree-optimization/119712, tree-optimization/120043, tree-optimization/120048, tree-optimization/120074, tree-optimization/120089, tree-optimization/120143, tree-optimization/120211 - re-enable annobin-plugin and offload-nvptx - configure with --enable-host-pie --enable-host-bind-now (RHEL-95564) - Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared (RHEL-94866) - ship libstdc++.modules.json (RHEL-97095) - Fix glibc32 build dependency (RHEL-113182) - update from releases/gcc-15 branch (RHEL-116513) - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185, ada/123289, ada/123302, ada/123306, ada/123371, ada/123589, analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764, c++/116952, c++/120446, c++/121854, c++/121966, c++/122048, c++/122070, c++/122550, c++/122668, c++/122752, c++/122772, c++/122834, c++/122922, c++/123331, c++/123597, debug/121964, diagnostics/120063, fortran/107406, libfortran/122936, libstdc++/120446, libstdc++/122812, libstdc++/122907, libstdc++/123147, middle-end/111817, middle-end/123107, middle-end/123392, middle-end/123703, rtl-optimization/121773, rtl-optimization/122215, rtl-optimization/123121, rtl-optimization/123523, target/117575, target/119130, target/120250, target/121192, target/121485, target/123022, target/123092, target/123155, target/123217, target/123460, target/123484, target/123489, target/123521, target/123607, target/123742, testsuite/123353, tree-optimization/122793, tree-optimization/122868, tree-optimization/123040, tree-optimization/123300, tree-optimization/123351, tree-optimization/123372, tree-optimization/123431, tree-optimization/123513, tree-optimization/123602, tree-optimization/123736, tree-optimization/123741 - Always inline _M_extract_name (RHEL-150603) - rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888, RHEL-75806) - Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239) - Sync libstdc++ pretty printers to latest GTS (RHEL-81975) - Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148). - Exception handling performance improvements (RHEL-105072) - libgcc: Use _dl_find_object to find DWARF data in unwinder - libgcc: Use lock-free data structures for run-time unwinder registration - Adjust glibc32 build dependency (RHEL-105072) - Add cross compilers for ppc64le and s390x for non-production uses (RHEL-94764) - Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230, RHEL-116477) - Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding branches and calls to gcov output, but not conditions (RHEL-105416). - Debrand for AlmaLinux - tests: Fix targetcli_config.json (RHEL-16229) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - Rebase to 2.5. - Resolves: RHEL-16030 - Rebase to version 2.12. Follow fedora and get rid of explicit % attr for library files - Resolves: RHEL-114115 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release 0.1.7 (rhbz#1805154) - Add tests-examples sub-package and %check - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.0.24 - Pull in upstream bugfixes Resolves: #1929148 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.0.25 - Fix a crash after libusb_exit API has been misused - Add patchset to fix covscan reports Resolves: #1938801 - Fix a crash if a transfer outlives closing the device Related: #1938801 - Updated and new regression fixes Resolves: #2058730 Related: #1938801 - Pull in new upstream libusb containing important regression fixes Resolves: #2058730 Resolves: #1938801 - Update to upstream version 1.0.30 to include the major bug fixes - Include the necessary API for fwupd backporting to RHEL9. Resolves: RHEL-183213 - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - lscpu: update tests, follow max freq for scaling (RHEL-12783) - lscpu: another tests update (RHEL-12783) - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-132706 - use sysusers.d for uuidd - Backport fix for CVE-2024-24806 Resolves: RHEL-24791 - Rebuilt for CRB inclusion Resolves: RHEL-135108 - RHEL-6895, rebase to 2.20.0 - Resolves: RHEL-59629, rebase to 2.22.0 - RHEL-6895, rebase to 2.20.0 - Resolves: RHEL-59629, rebase to 2.22.0 - Rebuilt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.5 - rhbz#2075057 - Rebuilt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.5 - rhbz#2075057 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuild for libevent soname bump - New upstream version (0.3.1) - Drop tevent goo and RHEL conditionals - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream version (0.3.2) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.4.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebased to libvirt-dbus-1.4.1 (rhbz#1977337) - RHEL: Add gating tests for RHEL-9 (rhbz#1950602) - FIX: RHEL: Add gating tests for RHEL-9 (rhbz#1950602) - Add missing file for RHEL-9 gating tests (rhbz#1950602) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebased to 4.0.0 release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Enable building for ppc64le - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - conf: Parse hyperv features even for host-model (RHEL-151684) - qemu: Wire up new hyperv host-model mode behavior (RHEL-151684) - Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552) - qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552) - virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552) - docs: Clarify host-model description in domain capabilities (RHEL-154552) - security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913) - security: Cleanup hostdev label error logic (RHEL-159913) - qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913) - viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174) - conf: Move and rename virStorageSourceFDTuple object (RHEL-159174) - conf: Refactor virHostdevIsPCIDevice (RHEL-159174) - hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174) - qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174) - qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174) - src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174) - conf: Introduce domain iommufd element (RHEL-159174) - qemu: Implement iommufd (RHEL-159174) - conf: Add iommufd fdgroup support (RHEL-159174) - qemu: Implement iommufd fdgroup (RHEL-159174) - tests: Add iommufd fdgroup test (RHEL-159174) - hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174) - cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822) - qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822) - qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822) - qemu_capabilities: Always sort features in host-model CPU (RHEL-178822) - qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822) - qemu_capabilities: Cache expanded CPU (RHEL-178822) - domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822) - util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822) - cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822) - cpu: Introduce virCPUUpdateFeatures (RHEL-178822) - Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822) - Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822) - virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822) - domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822) - qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822) - distro: Replace old gating with tmt - Enable building for ppc64le - qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624) - qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010) - qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010) - qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010) - qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010) - qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090) - qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090) - qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090) - virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090) - qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090) - qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770) - qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770) - qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770) - qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770) - qemu: Implement support for associating iommufd to hostdev (RHEL-126345) - qemu: Introduce privateData for hostdevs (RHEL-126345) - qemu: Support per-process memory accounting for iommufd (RHEL-126345) - qemu: open VFIO FDs from libvirt backend (RHEL-126345) - qemu: open iommufd FD from libvirt backend (RHEL-126345) - qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345) - tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345) - src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496) - qemu: Ignore cmp_legacy CPU flag (RHEL-146629) - qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614) - qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614) - RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614) - qemu: Implement support for persistent reservation migration control (RHEL-140614) - qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866) - qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866) - qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866) - Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866) - qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866) - docs: formatdomain: Fix indentation of docs for <disk><driver><statistics> element (RHEL-147866) - docs: formatdomain: Reword section about the '<statistics>' element under disk driver (RHEL-147866) - Introduce support for disk operation latency histogram collection (RHEL-147866) - qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866) - qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353) - qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353) - util: Move openning IOMMU device to viriommufd (RHEL-150353) - qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353) - util: Move openning VFIO device to virpci (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353) - util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353) - conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353) - conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353) - qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353) - qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353) - qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353) - qemuxmlconftest: Refactor host device preparation (RHEL-150353) - qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353) - qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353) - qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353) - qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353) - qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353) - qemu: Save IOMMUFD state into status XML (RHEL-150353) - qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353) - qemu_command: Extract building IOMMUFD props to function (RHEL-150353) - qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353) - conf: Introduce iommufd enum for domaincaps (RHEL-138544) - qemu: Fill iommufd domain capability (RHEL-138544) - tests: properly mock VFIO and IOMMU checks (RHEL-138544) - iommufd: fix FD leak in case of error (RHEL-150353) - domain_conf: initialize network hostdev private data (RHEL-151953) - qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953) - qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953) - Enable building for ppc64le - new upstream release - Rebuild for ICU 65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix multilib conflicts in lvconfig.h - Use make_build/make_install macros - Drop unneeded ldconfig_scriptlets macro call - Remove a no longer needed -mmmx CFLAGS addition - Disable strict aliasing - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 4.3 - Add GPG signature check for the source - Fix pycached stuff - Remove old python_provide macro - Remove ldconfig_scriptlets macro - Only use VFST for now, HFST can be provided in a later update - Bump release for a new Copr build - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - The dictionary data directory will now be /usr/lib/voikko on all architectures - Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there - This was suggested in the review of the voikko-fi package, see rhbz#1919688 - Use the license macro - Add Requires: voikko-fi - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1977691 bump release number to add libvoikko-devel package to CRB - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.3.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add patch to fix integer overflows. - Disable LTO to fix build - Resolves: RHEL-40655 - Add patch for double free Resolves: RHEL-93910 - Add patch for superindex full Resolves: RHEL-150344 - Add a set of newer Wacom tablets description files - Add support for the Cintiq Pro 27 (RHEL-101886) - Add support for the Intuos Pro 3rd Gen series (RHEL-101881) - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881) - Use separate Ring/Ring2 assignments - Add stylus definitions for the propen group (RHEL-122207) - Add tablet definitions for the latest Cintiqs (RHEL-122206) - Fix the overlap for button assignments in the SVG (RHEL-126355) - Add a set of newer Wacom tablets description files - Add support for the Cintiq Pro 27 (RHEL-101886) - Add support for the Intuos Pro 3rd Gen series (RHEL-101881) - Rearrange the OSD buttons for the Intuos Pro 3rd Gen (RHEL-101881) - Use separate Ring/Ring2 assignments - Add stylus definitions for the propen group (RHEL-122207) - Add tablet definitions for the latest Cintiqs (RHEL-122206) - Fix the overlap for button assignments in the SVG (RHEL-126355) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Update to 1.21.0 Resolves: rhbz#2063522 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Update to 1.21.0 Resolves: rhbz#2063522 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Update to 1.21.0 Resolves: rhbz#2063522 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Update to 1.21.0 Resolves: rhbz#2063522 - Add fix for mzbz#1819244 - Fix tools subpackage dependency - Bump the release to "6" to accommodate the 9.1.0.z release bumps - Bump the release to "7" to accommodate the 9.1.0.z release bumps as libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1 - Added fix for CVE-2023-4863 - Add fix for mzbz#1819244 - Fix tools subpackage dependency - Bump the release to "6" to accommodate the 9.1.0.z release bumps - Bump the release to "7" to accommodate the 9.1.0.z release bumps as libwebp-1.2.0-6.el9 < libwebp-1.2.0-6.el9_1 - Added fix for CVE-2023-4863 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Update CLEAR_VBAR_ENTRY size after alloc (CVE-2026-33984) - Fail progressive_rfx_quant_sub on invalid values (CVE-2026-33983) Resolves: RHEL-163097, RHEL-163113 - Fix double free in xf_rail_window_common cleanup (CVE-2026-26986) - Fix growth of preallocated buffers (CVE-2026-27951) - Fix heap-buffer-overflow in bitmap_cache_put (CVE-2026-29775) - Add DSP format checks (CVE-2026-31884) - Fix DSP array bounds checks (CVE-2026-31883) - Fix DSP array bounds checks (CVE-2026-31885) - Update CLEAR_GLYPH_ENTRY::count after alloc (CVE-2026-33985) Resolves: RHEL-159816, RHEL-155478, RHEL-161047, RHEL-161482 Resolves: RHEL-161519, RHEL-161085, RHEL-168463 - Lock appWindow to fix use-after-free in RAIL mode (CVE-2026-25952) Resolves: RHEL-159860 - Fix incorrect bounds checks in planar codec (CVE-2026-45700) Resolves: RHEL-186991 - Backport several CVE fixes (CVE-2026-64624, CVE-2026-67289, CVE-2026-67299, CVE-2026-68580) Resolves: RHEL-213169, RHEL-222785, RHEL-222966, RHEL-223605 - Update to 2.11.7 (CVE-2024-32039, CVE-2024-32040, CVE-2024-32041, CVE-2024-32458, CVE-2024-32459, CVE-2024-32460, CVE-2024-32658, CVE-2024-32659, CVE-2024-32660, CVE-2024-32661, CVE-2024-32662) - Try next DNS entry on connect failure Resolves: RHEL-113722 - Backport several CVE fixes Resolves: RHEL-142427, RHEL-142411, RHEL-142395, RHEL-142379, RHEL-142363 Resolves: RHEL-142348, RHEL-142332 - Backport several CVE fixes Resolves: RHEL-148849, RHEL-148891, RHEL-149030 - Backport several CVE fixes Resolves: RHEL-151989, RHEL-152216 - Backport several CVE fixes Resolves: RHEL-148052, RHEL-148053, RHEL-148056, RHEL-148075, RHEL-148081 Resolves: RHEL-148098, RHEL-148105, RHEL-148106, RHEL-148941, RHEL-149032 Resolves: RHEL-149043, RHEL-149066, RHEL-155994 - Fix use of nsc_process_message Resolves: RHEL-155994 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - document that libwmf bundles a modified old copy of gd 2.0.1 https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - add gating.yaml file - ship libwmf-devel in CRB - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - document that libwmf bundles a modified old copy of gd 2.0.1 https://fedoraproject.org/wiki/Bundled_Libraries#Requirement_if_you_bundle - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - add gating.yaml file - ship libwmf-devel in CRB - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 3.36.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.0 - Tighten soname globs - revert https://gitlab.gnome.org/GNOME/libwnck/-/commit/3456b74 - fixes rhbz #1971048 - and https://github.com/mate-desktop/mate-panel/issues/1230 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix missing #includes for gcc-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.7.1 and switch to meson build system - Update to 1.8.0 - Update to 1.9.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.90 - Update to 1.9.91 - Update to 1.10.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt to add -devel subpackage to CRB Resolves: #2059251 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OpenSSL certificates set up Resolves: RHEL-118292 - Update to openwsman-2.8.1 Resolves: RHEL-97643 - Add libwsman-client.so.4 for backward compatibility Related: RHEL-97643 - Support added for post-quantum cryptography Resolves: RHEL-127516 - Fix bogus 'sscg' arguments Related: RHEL-118292 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Explicitly force linking with '-Wl,-z,defs' - Trim %changelog starting with v4.4.0 - Remove memcheck conditional - Disable LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add a patch to add support for LTO builds - Enable LTO - Add a patch to fix Wformat-overflow - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - Add explicit BR: perl-core - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Explicitly force linking with '-Wl,-z,defs' - Trim %changelog starting with v4.4.0 - Remove memcheck conditional - Disable LTO - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add a patch to add support for LTO builds - Enable LTO - Add a patch to fix Wformat-overflow - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - Add explicit BR: perl-core - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial import (#1980342) - Update to 0.1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Update to 0.1.2 - Add explicit package version requirement for the devel package for rpminspect. - Upstream version bump - Upstream version bump - Upstream version bump - Upstream version bump - Fix build with Clang 20 - Upstream version bump - Add annocheck exceptions for BPF objects (Felix) - Re-enable debug builds (Felix) - Add libcap-ng-devel to BuildDepends - Upstream version bump - Drop upstreamed patch - Upstream version bump - libxkbcommon 0.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - libxkbcommon 1.0.0 - libxkbcommon 1.0.1 - libxkbcommon 1.0.2 - libxkbcommon 1.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - libxkbcommon 0.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - libxkbcommon 1.0.0 - libxkbcommon 1.0.1 - libxkbcommon 1.0.2 - libxkbcommon 1.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - libxkbcommon 0.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - libxkbcommon 1.0.0 - libxkbcommon 1.0.1 - libxkbcommon 1.0.2 - libxkbcommon 1.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2024-25062 (RHEL-29196) - Fix CVE-2022-49043 (RHEL-76298) - Fix CVE-2024-56171 (RHEL-80127) - Fix CVE-2025-24928 (RHEL-80142) - Fix CVE-2025-6021 (RHEL-96507) - Fix CVE-2025-49794 (RHEL-96405) - Fix CVE-2025-49796 (RHEL-96431) - Fix CVE-2025-7425 (RHEL-102806) - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873) - Fix CVE-2025-9714 (RHEL-119283) - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) - Fix CVE-2022-49043 (RHEL-76298) - Fix CVE-2024-56171 (RHEL-80127) - Fix CVE-2025-24928 (RHEL-80142) - Fix CVE-2025-6021 (RHEL-96507) - Fix CVE-2025-49794 (RHEL-96405) - Fix CVE-2025-49796 (RHEL-96431) - Fix CVE-2025-7425 (RHEL-102806) - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873) - Fix CVE-2025-9714 (RHEL-119283) - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) - Fix CVE-2024-34459 (RHEL-177882) - Fix CVE-2022-49043 (RHEL-76298) - Fix CVE-2024-56171 (RHEL-80127) - Fix CVE-2025-24928 (RHEL-80142) - Fix CVE-2025-6021 (RHEL-96507) - Fix CVE-2025-49794 (RHEL-96405) - Fix CVE-2025-49796 (RHEL-96431) - Fix CVE-2025-7425 (RHEL-102806) - Fix CVE-2025-32415 (RHEL-100182) - Fix CVE-2025-32414 (RHEL-99873) - Fix CVE-2025-9714 (RHEL-119283) - Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283) - Fix CVE-2024-34459 (RHEL-177882) - Fix CVE-2025-6170 (RHEL-182016) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2025-24855 (RHEL-83500) - Fix CVE-2024-55549 (RHEL-83514) - Include alloc changes into previous patch (RHEL-83514) - Fix CVE-2023-40403 (RHEL-82213) - Fix upgrade path for CVE-2023-40403 (RHEL-82213) - Fix CVE-2025-24855 (RHEL-83500) - Fix CVE-2024-55549 (RHEL-83514) - Include alloc changes into previous patch (RHEL-83514) - Fix CVE-2023-40403 (RHEL-82213) - Fix upgrade path for CVE-2023-40403 (RHEL-82213) - Fix CVE-2025-10911 (RHEL-171991) - Fix CVE-2025-24855 (RHEL-83500) - Fix CVE-2024-55549 (RHEL-83514) - Include alloc changes into previous patch (RHEL-83514) - Fix CVE-2023-40403 (RHEL-82213) - Fix upgrade path for CVE-2023-40403 (RHEL-82213) - Fix CVE-2025-24855 (RHEL-83500) - Fix CVE-2024-55549 (RHEL-83514) - Include alloc changes into previous patch (RHEL-83514) - Fix CVE-2023-40403 (RHEL-82213) - Fix upgrade path for CVE-2023-40403 (RHEL-82213) - Fix CVE-2025-10911 (RHEL-171991) - Resolves: RHEL-111202 - Move libyang-devel to CRB - Resolves: RHEL-126845 - Rebase libyang to version 2.1.148 - Resolves: RHEL-111202 - Move libyang-devel to CRB - Resolves: RHEL-126845 - Rebase libyang to version 2.1.148 - Fix integer overflow and OOM in LYB parser string/value reading - Resolves: RHEL-177019 - Update to 1.1.1 - Resolves: RHEL-50152, RHEL-50153 - Update to 1.1.2 - Resolves: RHEL-73373 - Update to 1.1.1 - Resolves: RHEL-50152, RHEL-50153 - Update to 1.1.2 - Resolves: RHEL-73373 - updated to 3.0.3 - Resolves: RHEL-62974 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.4.91 - improve full pinyin auto correction - bug fixes - Update to 2.4.92 - update pinyin data - bug fixes - Update to 2.6.0 - bug fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for adding libzip-tools subpackage to pungi Appstream repo - Rebuilt for adding libzip-tools subpackage to pungi Appstream repo - Rebuild for ICU 65 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.4.0 - Resolves: RHEL-73376, RHEL-72684 - Update to 1.4.1 - Resolves: RHEL-100046 - Rebase to 1.5.5 Resolves: RHEL-62221 - Update to 1.6.1 - Fix store/restore utils handling #1753648 - Update to 1.7.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.7.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 4.2 (RHEL-2026 RHEL-2342 RHEL-12182 RHEL-15929) - fix ts2phc to handle large NMEA delay (RHEL-23208) - fix loading and reloading of leapfile - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387) - fix ts2phc to correctly handle leap seconds (RHEL-40216) - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947) - add options to configure multicast IP addresses (RHEL-31178) - add holdover support to ts2phc (RHEL-50216) - update to 4.4 (RHEL-58213 RHEL-57040) - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027) - support static sink clocks in phc2sys automatic mode (RHEL-62864) - don't require -O option without -a and -w in phc2sys (RHEL-69138) - add experimental option for external PPS in ts2phc automatic mode (RHEL-72468) - add command to set external grandmaster properties (RHEL-90585) - refresh link status on faults (RHEL-56168) - fix unicast server to recover after port fault (RHEL-93496) - handle missing pulses in ts2phc (RHEL-112193) - rework NMEA delay patch to fix PPS edge rejection (RHEL-39387) - fix ts2phc to correctly handle leap seconds (RHEL-40216) - fix ts2phc to reset NMEA parser after RMC message (RHEL-40947) - add options to configure multicast IP addresses (RHEL-31178) - add holdover support to ts2phc (RHEL-50216) - update to 4.4 (RHEL-58213 RHEL-57040) - fix port-specific ptp/p2p_dst_ipv4 configuration (RHEL-60027) - support static sink clocks in phc2sys automatic mode (RHEL-62864) - don't require -O option without -a and -w in phc2sys (RHEL-69138) - add experimental option for external PPS in ts2phc automatic mode (RHEL-72468) - add command to set external grandmaster properties (RHEL-90585) - refresh link status on faults (RHEL-56168) - fix unicast server to recover after port fault (RHEL-93496) - fix high CPU usage by ptp4l when link is down (RHEL-191410) - fix phc2sys to not get stuck in static mode (RHEL-187949) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update fontconfig DTD id in conf file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bring back one RHEL specific patch to fix the installation issue. Related: rhbz#2031786 - man doc update and one fix for lib and another for sctp_test. Related: RHEL-25098 - Bring back one RHEL specific patch to fix the installation issue. Related: rhbz#2031786 - man doc update and one fix for lib and another for sctp_test. Related: RHEL-25098 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - lldpd use systemd-sysusers [RHEL-5787] - Add range checking for tx-interval and tx-hold [RHEL-40245] - Add range checking for tx-interval and tx-hold [RHEL-40245] - lldpd use systemd-sysusers [RHEL-5787] - Add range checking for tx-interval and tx-hold [RHEL-40245] - Add range checking for tx-interval and tx-hold [RHEL-40245] - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - New version - Use make_build macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix systemd warning about use of /var/run - Resolves: rhbz#1869421 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Add support for AMD CPU Family 19h - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New version - Use make_build macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix systemd warning about use of /var/run - Resolves: rhbz#1869421 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Add support for AMD CPU Family 19h - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New version - Use make_build macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix systemd warning about use of /var/run - Resolves: rhbz#1869421 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New flag for no sensors added. This flag is used in VM environment to make sensors binaries not fail if no sensors was detected. - Add support for AMD CPU Family 19h - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 2.14.1 - Disable javadoc (#1988896) - Build with jansi-2 - Remove deps on slf4j-ext (no longer available in Fedora 35) - Update log4j to 2.15.0 (#2030907) - Security fix for CVE-2021-44228 (#2030945) - Update log4j to 2.16.0 - Disables JNDI by default - Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack - Update log4j to 2.17.1 for CVE-2021-44832 RCE via JDBC Appender (when attacker controls config) - Remove dependency on jackson - Fix compatibility with OpenJDK 8 - Remove glyphicons resources from source package - Update to upstream version 2.17.2 - Re-add log4j-web subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 2.14.1 - Disable javadoc (#1988896) - Build with jansi-2 - Remove deps on slf4j-ext (no longer available in Fedora 35) - Update log4j to 2.15.0 (#2030907) - Security fix for CVE-2021-44228 (#2030945) - Update log4j to 2.16.0 - Disables JNDI by default - Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack - Update log4j to 2.17.1 for CVE-2021-44832 RCE via JDBC Appender (when attacker controls config) - Remove dependency on jackson - Fix compatibility with OpenJDK 8 - Remove glyphicons resources from source package - Update to upstream version 2.17.2 - Re-add log4j-web subpackage - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 2.14.1 - Disable javadoc (#1988896) - Build with jansi-2 - Remove deps on slf4j-ext (no longer available in Fedora 35) - Update log4j to 2.15.0 (#2030907) - Security fix for CVE-2021-44228 (#2030945) - Update log4j to 2.16.0 - Disables JNDI by default - Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack - Update log4j to 2.17.1 for CVE-2021-44832 RCE via JDBC Appender (when attacker controls config) - Remove dependency on jackson - Fix compatibility with OpenJDK 8 - Remove glyphicons resources from source package - Update to upstream version 2.17.2 - Re-add log4j-web subpackage - sshd: sort IP addresses reported by count - Resolves: RHEL-69277 - Add support for zstd-compressed log files - Resolves: RHEL-97021 - Install and use systemd-tmpfiles.d mechanism - Resolves: RHEL-105257 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - Update for AlmaLinux 9.6 beta - Correct grammar in Grub rescue menuentries - Update for AlmaLinux 9.6 beta - Add setpriv as ostree containers dependency (jkonecny) (jkonecny) Resolves: RHEL-15123 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24420 - monitor: Skip repo errors involving CDROM/file source (bcl) (bcl) Resolves: RHEL-4658 - rsyslog.conf: Update to use current config syntax (bcl) (bcl) Resolves: RHEL-46857 - New lorax documentation - 34.9.27 (bcl) (bcl) Related: RHEL-83208 - mkksiso: Update to newer version supporting rebuilding efiboot.img (bcl) Resolves: RHEL-83208 - livemedia-creator: Set 0755 permission on / cpio overlay (bcl) (bcl) Resolves: RHEL-83986 - templates.d: Synchronize with lorax-templates-rhel (bcl) Related: RHEL-54712 Resolves: RHEL-69019 - lorax: Change default rootfs size to 4GiB (bcl) Resolves: RHEL-95360 - templates: Synchronize with lorax-templates-rhel (bcl) (bcl) Resolves: RHEL-54712 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) (jikortus) Resolves: RHEL-100463 - lorax.spec: Fix a wrong issue reference (bcl) (bcl) Related: RHEL-83986 - tools: Add support for Jira RHEL-XXX issues (bcl) Related: RHEL-15122 - Add setpriv as ostree containers dependency (bcl) Resolves: RHEL-15122 - templates: Remove libreport bugzilla plugins (bcl) Resolves: RHEL-24421 - rsyslog.conf: Update to use current config syntax (bcl) Resolves: RHEL-28654 - Bump release version to 9.6 (bcl) Related: RHEL-69011 - runtime-cleanup: Newer glibc installs /usr/sbin/ldconfig (bcl) Resolves: RHEL-69011 - runtime-cleanup: Leave stat binary and openssl files (bcl) Resolves: RHEL-79950 - Bump release version to 9.7 (bcl) Related: RHEL-91930 - Add a boot menu for fips=1 (bcl) Resolves: RHEL-91930 - Set ppc64le default boot to test the media (bcl) Resolves: RHEL-93170 - live-install.tmpl: Fix broken single item tuple (bcl) Related: RHEL-108149 - libvirt.tmpl: Fix use of xrange (bcl) Related: RHEL-108149 - 80-rhel: Remove unused templates and config files (bcl) Resolves: RHEL-108149 - Fix tzselect path in runtime-cleanup.tmpl (jikortus) Resolves: RHEL-101453 + low-memory-monitor-2.0-1 - Update to 2.0 + low-memory-monitor-2.0-2 - Rename -docs subpackage to -doc + low-memory-monitor-2.0-3 - Disable OOM killer by default for now - Import into Fedora (#1769843) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + low-memory-monitor-2.0-6 - Reload presets when updating from an older version to enable daemon + low-memory-monitor-2.1-1 - Update to 2.1 - Don't poke at sysrq proc file (#1898524) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Release B.02.20-1 update to upstream latest(9372b680418) - Release B.02.20-2 update to upstream latest(98b74f64e76) - Release B.02.20-3 update to upstream latest(af7c69e1b6e) - Release B.02.20-4 update to upstream latest(209f8306e95) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Initialize some variables to avoid gcc warning (#1799619) - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Add support for SCV syscall insn for ppc64le - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add patch to fix build failure with GCC 10 - Enable SystemTAP SDT support (#1386412) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release - Add requires systemtap-sdt-devel to lttng-ust-devel (#1386412) - New upstream release - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - apply upstream fix for CVE-2022-33099 - Enable gating - Fix up CVE-2022-33099 patch - Rebase to lua 5.4.4 - Resolves CVE-2021-44964 - Resolves CVE-2021-43519 - Apply upstream patch for CVE-2022-28805 - Disable bootstrap mode forgotten on 5.4 rebase (#2135419) - Update to 34.1.1 (bz#1849450) - Fix bit32 patch - More lua 5.4 fixes - Update to 35.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Pass LDFLAGS to the build so RPM linker flags are used and annocheck passes. - Add patch from upstream to fix propagation of LDFLAGS into build system. - Resolves: rhbz#2044879 - Added gating.yaml - Resolves: rhbz#2054488 - Added tests.yaml - Resolves: rhbz#2058499 - Initial package - Also move lua.attr requires generator - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17 - Add explicit conflict with older lua-devel - Require rpm, not redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial package - Also move lua.attr requires generator - Modify several conditionals to support RHEL 9+ and drop ancient Fedora 17 - Add explicit conflict with older lua-devel - Require rpm, not redhat-rpm-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream release v10 Resolves: RHEL-122139 - Fix duplicate LV names when converting pools to RAID1 with more than 2 legs. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Fix false positive warnings about stray FDs on s390x. - Fix duplicate LV names when converting pools to RAID1 with more than 2 legs. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Workaround for NVMe WWID changing after kernel update. - Fix temporary LVs not cleaned when converting in use LV to a thin pool. - Check FS resize is supported before extending LV. - Fix issue affecting memory locking before suspend (2.03.27). - Fix race causing lvm2 not recognizing active devices. - Update to upstream version 2.03.32. - See WHATS_NEW and WHATS_NEW_DM for more information. - Fix vgremove hanging immediately after lockstart. - Add repair option for RAID volumes with too many transiently failed devices. - Update to upstream version 2.03.33. - See WHATS_NEW and WHATS_NEW_DM for more information. - Add message when activating RAID volumes with snapshots. - Allow integrity to use multiple segments for metadata. - Handle wrong XFS reported size when shrinking LV immediately after growing. - Fix false positive warnings about stray FDs on s390x. - backport IDN2 support from upstream (#2040124) - fix page downloading (RHEL-16809) - Update to 1.9.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.9.3 and switch to Meson - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix cve-2021-3520 resolves: cve-2021-3520 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.10 - Disable -fno-strict-aliasing (RHBZ#1807737) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Release bump to drop unused patches from the dist-git Resolves: rhbz#1956457 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.10 - Disable -fno-strict-aliasing (RHBZ#1807737) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Release bump to drop unused patches from the dist-git Resolves: rhbz#1956457 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add si-sayura.mim input method - Fix mni-inscript2-{beng,mtei}.mim and sat-inscript2-{deva,olck}.mim - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build and make_install macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961997 - Add gating tests from rhel-8 - Malayalam Mozhi input scheme bug fix - Resolves:rhbz#1961997 - minglish file permission fix - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961998 - Add gating tests from rhel-8 - Resolves:rhbz#1967892 - Add conditional for anthy module subpackage - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable %check on ppc64le (workaround for FTBFS) Resolves: #1864107 - Drop workaround introduced in previous release Resolves: #1864107 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to m4-1.4.19 Resolves: #1975101 - Fix adding U0970 based on Vishal Vijayraghavan's fix - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Convert to new fonts packaging guidelines - Update CI script for new installed font path - Update fontconfig DTD id in conf file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add SCL compatibility to LTS builds. - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebase to make 4.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Handle SIGPIPE as a fatal signal - Rebase to make 4.4 - Ensure that we can transition from make-latest to make - Initial commit for make-latest.el9 - Add SCL compatibility to LTS builds. - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebase to make 4.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Handle SIGPIPE as a fatal signal - Rebase to make 4.4 - Ensure that we can transition from make-latest to make - Initial commit for make-latest.el9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Increase MAX_NAME to 16384 - Resolves: RHEL-93724 - Fix patch to increase MAX_NAME to 16384 - Resolves: RHEL-93724 - Initial package for RHEL 9 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 3.1.10 - Rebase to 3.1.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 3.1.12 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix package conflicts - Rebase to 3.1.13 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 3.2.6 - Introduction of a new '*-doc' subpackage - Rebase to 3.1.10 - Rebase to 3.1.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 3.1.12 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix package conflicts - Rebase to 3.1.13 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 3.2.6 - Introduction of a new '*-doc' subpackage - Rebase to 3.1.10 - Rebase to 3.1.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to 3.1.12 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix package conflicts - Rebase to 3.1.13 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 3.2.6 - Introduction of a new '*-doc' subpackage - Rebase to 3.1.9 - Add patch add_docs_license_dir_option - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Force the CMake change regarding the in-source builds also to F31 and F32 - %cmake macro covers the %{set_build_flags}, so they are not needed That also means, the debug build changes to the build flags must be done AFTER the %cmake macro was used. - %cmake macro also covers several other options which redudndant specification I removed in this commit - Default to %cmake commands instead of %make commands - Rebase to 3.1.11 - Add updates for paths in libraries_include_path.patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase to 3.1.12 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to version 2.6.2 (#1860212) - Remove unnecessary dependency on sonatype-oss-parent. - Rebase to version 2.7.0 (#1882558) - Rebase to version 2.7.1 (#1906291) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove maven-javadoc-plugin dependency - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to new major version 3.0.1 (it's Beta version) - Removed documentation/ folder, as it was removed by upstream - Rebase to 3.0.3 - Temporarily disable generation of -javadoc.rpm, due to missing feature in xmvn, which leads to build crash - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Rebase to 10.5.26 - Rebase to 10.5.27 - Rebase to 10.5.29 - Release bump for rebuild - Release bump for rebuild - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebase to 10.11.10 - Add explicit BR: libxcrypt-devel - Rebase to 10.11.11 - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.13 - Rebase to 10.11.14 - Resolves: RHBZ#2386961 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for tmpfiles.d change - Add installation of downstream sysusers.d config file in place of the upstream one - Rebase to 10.11.15 - Resolves: RHBZ#2417697 - Updated service files to work with environment files - Rebase to 10.11.16 - Rebase to 10.11.17 - Rebase to 10.11.18 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Initial commit on stream-mariadb-11.8-rhel-9.8.0 - Resolves: RHEL-96956 - Bump release for tmpfiles.d change - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Bump release for rebuild - Bump release for rebuild - Rebase to 11.8.5 - Rebase to 11.8.6 - Added a fix for SIGSEGV when using skip-grant-tables - Resolves: RHBZ#2438390 - Rebase to 11.8.7 - Rebase to 11.8.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - add -fcommon to the flags (#1799634) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add maven-openjdk21 - Resolves: RHEL-62407 - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Rebuild with regenerated Requires on Java - Fix patch usage - Switch to Fedora tests - Disable building on i686 - Add noarch to ExclusiveArch - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add maven-openjdk25 binding - Update to upstream version 3.8.5 - Add build-dependency on extra-enforcer-rules - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Add OpenJDK 21 binding - Related: RHEL-13046 - Rebuild to regenerate auto-requires - Drop bindings for OpenJDK < 21 - Update gating.yaml - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Generate bindings with %jp_binding macro - Exclude maven-unbound from openjdk21 tests - Add test plan for maven-unbound - Update javapackages test plan to f42 - Require /plans/matrix/unbound/jlink for gating - Reuse jlink image if it already exists - Add maven-openjdk25 binding - Add maven-openjdk21 - Resolves: RHEL-62407 - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Rebuild with regenerated Requires on Java - Fix patch usage - Switch to Fedora tests - Disable building on i686 - Add noarch to ExclusiveArch - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add maven-openjdk25 binding - Update to upstream version 3.8.5 - Add build-dependency on extra-enforcer-rules - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Add OpenJDK 21 binding - Related: RHEL-13046 - Rebuild to regenerate auto-requires - Drop bindings for OpenJDK < 21 - Update gating.yaml - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Generate bindings with %jp_binding macro - Exclude maven-unbound from openjdk21 tests - Add test plan for maven-unbound - Update javapackages test plan to f42 - Require /plans/matrix/unbound/jlink for gating - Reuse jlink image if it already exists - Add maven-openjdk25 binding - Add maven-openjdk21 - Resolves: RHEL-62407 - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Rebuild with regenerated Requires on Java - Fix patch usage - Switch to Fedora tests - Disable building on i686 - Add noarch to ExclusiveArch - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add maven-openjdk25 binding - Update to upstream version 3.8.5 - Add build-dependency on extra-enforcer-rules - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Add OpenJDK 21 binding - Related: RHEL-13046 - Rebuild to regenerate auto-requires - Drop bindings for OpenJDK < 21 - Update gating.yaml - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Generate bindings with %jp_binding macro - Exclude maven-unbound from openjdk21 tests - Add test plan for maven-unbound - Update javapackages test plan to f42 - Require /plans/matrix/unbound/jlink for gating - Reuse jlink image if it already exists - Add maven-openjdk25 binding - Add maven-openjdk21 - Resolves: RHEL-62407 - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Rebuild with regenerated Requires on Java - Fix patch usage - Switch to Fedora tests - Disable building on i686 - Add noarch to ExclusiveArch - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add maven-openjdk25 binding - Update to upstream version 3.8.5 - Add build-dependency on extra-enforcer-rules - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Add OpenJDK 21 binding - Related: RHEL-13046 - Rebuild to regenerate auto-requires - Drop bindings for OpenJDK < 21 - Update gating.yaml - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Generate bindings with %jp_binding macro - Exclude maven-unbound from openjdk21 tests - Add test plan for maven-unbound - Update javapackages test plan to f42 - Require /plans/matrix/unbound/jlink for gating - Reuse jlink image if it already exists - Add maven-openjdk25 binding - Add maven-openjdk21 - Resolves: RHEL-62407 - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Rebuild with regenerated Requires on Java - Fix patch usage - Switch to Fedora tests - Disable building on i686 - Add noarch to ExclusiveArch - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add maven-openjdk25 binding - Update to upstream version 3.8.5 - Add build-dependency on extra-enforcer-rules - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Add OpenJDK 21 binding - Related: RHEL-13046 - Rebuild to regenerate auto-requires - Drop bindings for OpenJDK < 21 - Update gating.yaml - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Generate bindings with %jp_binding macro - Exclude maven-unbound from openjdk21 tests - Add test plan for maven-unbound - Update javapackages test plan to f42 - Require /plans/matrix/unbound/jlink for gating - Reuse jlink image if it already exists - Add maven-openjdk25 binding - Add maven-openjdk21 - Resolves: RHEL-62407 - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Rebuild with regenerated Requires on Java - Fix patch usage - Switch to Fedora tests - Disable building on i686 - Add noarch to ExclusiveArch - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add maven-openjdk25 binding - Drop bindings for OpenJDK < 21 - Update gating.yaml - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Generate bindings with %jp_binding macro - Exclude maven-unbound from openjdk21 tests - Add test plan for maven-unbound - Update javapackages test plan to f42 - Require /plans/matrix/unbound/jlink for gating - Reuse jlink image if it already exists - Add maven-openjdk25 binding - Add maven-openjdk21 - Resolves: RHEL-62407 - Suggest maven-openjdk17 - Resolves: RHEL-62398 - Rebuild with regenerated Requires on Java - Fix patch usage - Switch to Fedora tests - Disable building on i686 - Add noarch to ExclusiveArch - Implement new non-conflicting Java bindings - Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072 - Add maven-openjdk25 binding - Update to upstream version 3.8.5 - Add build-dependency on extra-enforcer-rules - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Turn hard dependency on java-devel into a weak dependencny - Resolves: rhbz#2165595 - Add OpenJDK 21 binding - Related: RHEL-13046 - Rebuild to regenerate auto-requires - Drop bindings for OpenJDK < 21 - Update gating.yaml - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Generate bindings with %jp_binding macro - Exclude maven-unbound from openjdk21 tests - Add test plan for maven-unbound - Update javapackages test plan to f42 - Require /plans/matrix/unbound/jlink for gating - Reuse jlink image if it already exists - Add maven-openjdk25 binding - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Add aether-connector-wagon alias - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.9.18 - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Switch to a newer patch macro syntax - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 1.9.22 - Update javapackages test plan to f42 - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 3.4.2 - Rebuild - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Drop bindings for OpenJDK < 21 - Update gating.yaml - Expect JVMs in %_jvmdir instead of %_jvmlibdir - Generate bindings with %jp_binding macro - Exclude maven-unbound from openjdk21 tests - Add test plan for maven-unbound - Update javapackages test plan to f42 - Require /plans/matrix/unbound/jlink for gating - Reuse jlink image if it already exists - Add maven-openjdk25 binding - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Update to upstream version 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update Java source/target to 1.8 - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Set Java compiler source/target via javaVersion property - Update javapackages test plan to f42 - Use %autosetup -C - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - fix gcc-10 build failure - update to 4.8.25 - update BR - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 4.8.26 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Avoid usage of libssh2 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 1.3.0 Resolves: RHEL-73318 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: #2182069 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: #2182069 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump version for package rebuild We are moving the 'mecab-devel' RPM from the 'buildroot' repo to the 'CRB' repo - Resolves: #2182069 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.6.7 - Rebuilt with libevent-2.1.12 - Update to 1.6.8 - Update to 1.6.9 - Enable sasl pwdb (#1909724) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use systemd-users - Resolves: rhbz#2095432 - Fix timing side-channel in SASL password database authentication (CVE-2026-47783) - Resolves: RHEL-179093 - Update to 1.6.7 - Rebuilt with libevent-2.1.12 - Update to 1.6.8 - Update to 1.6.9 - Enable sasl pwdb (#1909724) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use systemd-users - Resolves: rhbz#2095432 - Fix timing side-channel in SASL password database authentication (CVE-2026-47783) - Resolves: RHEL-179093 - Update memkind source file to 1.10.0 upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Avoid uninitialized variable in testsuite - Update memkind source file to 1.10.1 upstream - Work around false positive warning with gcc-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update memkind source file to 1.11.0 upstream - Fix annocheck pie test failure (2044880) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream latest release - Update to upstream latest release - Use %make_build macro https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to upstream latest release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to upstream latest release - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to latest upstream(813c2feaa2f) - Initial commit on c9s Resolves: https://issues.redhat.com/browse/RHEL-132415 - Enable gating - Initial commit on c9s Resolves: https://issues.redhat.com/browse/RHEL-132415 - Enable gating - Initial commit on c9s Resolves: https://issues.redhat.com/browse/RHEL-132415 - Enable gating - Initial commit on c9s Resolves: https://issues.redhat.com/browse/RHEL-132415 - Enable gating - Rebuilt for new freeglut. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with upstream to drop the glew dependency - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) * Update to 25.0.7 Resolves: https://issues.redhat.com/browse/RHEL-75954 - NV dGFX fix for firefox crashing Backport fixes for NV dGFX driver crashing firefox Resolves: https://issues.redhat.com/browse/RHEL-93219 - Fix black screen on ppc64le Resolves: https://issues.redhat.com/browse/RHEL-113831 - Resolves: https://issues.redhat.com/browse/RHEL-107477 Enable NVK also for RHEL 9 - Disable LTO globally Resolves: https://issues.redhat.com/browse/RHEL-128255 - Resolves: https://issues.redhat.com/browse/RHEL-132415 - Resolves: https://issues.redhat.com/browse/RHEL-105157 - Enable va-driver only in Fedora Resolves: https://issues.redhat.com/browse/RHEL-144489 - Fix s390x regressions Resolves: https://issues.redhat.com/browse/RHEL-151315 - Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves: https://github.com/AlmaLinux/raspberry-pi/issues/32) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.5.1 (#1859995) - Update to 0.6.0 (#1875250) - Update to 1.0.0 (#1884346) - Update to 1.0.1 - Update to 1.0.2 (#1906430) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable the test run under RHEL due to missing dependencies Resolves: rhbz#1932454 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Set version to 106.0.0 - RHEL-408 - Add provides, obsoletes for mingw-qemu-ga-win - RHEL-385 - Rebase mingw-qemu-ga-win to QEMU 8.0 - Set version to 106.0.1 - RHELPLAN-147763 - [mingw-qemu-ga-win] VSS DLL: Add logging mechanism - RHEL-581 - Use the SPDX vocabulary to specify the license - Set version to 107.0.0 - RHEL-15491 - Rebase qemu-ga to 8.2.0 - Set version to 107.0.1 - RHEL-21655 - Fix mingw-qemu-ga-win licenses - Set version to 107.0.2 - RHEL-26205 - [QGA] Add Windows Server 2025 to guest-osinfo command - Set version to 108.0.0 - RHEL-23026 - Rebase qemu-ga to 9.0.0 - Set version to 108.0.1 - RHEL-34770 - Gatting rpminspect SPDX license expressions validate failed - RHEL-45598 - Set version to 108.0.2 - RHEL-57013 - Rebase qemu-ga to 9.1.0 - RHEL-57012 - guest agent public ssh injection api support for Windows - Set version to 109.1.0 - RHEL-57746 - mingw-qemu-ga-win failed to build on s390x - Split mkfontscale/mkfontdir out from xorg-x11-font-utils into its own package (#1932734) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 5.5.7 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.5.8 bump - 5.5.9 bump - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable mkpasswd building (#2054043) - Remove changelog from mkpasswd, it has double size of actual tool - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream release 20201225 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to upstream release 20210805 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release (1.6.2) - Resolves: #1828142 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release (1.6.3) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Build dep adjustments; no Fedora code changes - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - crypto: Handle EVP changes in OpenSSL 3 - Resolves: #1992648 - Fixing gating issue - rebuild Resolves: rhbz#2184763 - Fixing mellon_create_metadata.sh script Resolves: RHEL-35898 - Publishing diagnostic module in CRB repository Resolves: RHEL-33585 - Resolves: rhbz#2184145 - CVE-2023-28625 NULL pointer dereference when OIDCStripCookies is set and a crafted Cookie header is supplied Resolves: rhbz#2189268 - auth_openidc.conf mode 0640 by default Rebase to 2.4.10 version improves `state cookies piling up` problem Resolves: RHEL-32450 Race condition in mod_auth_openidc filecache Resolves: RHEL-25422 mod_auth_openidc: DoS when using `OIDCSessionType client-cookie` and manipulating cookies (CVE-2024-24814) Rebase to version 2.4.16.10 - Resolves: RHEL-44894 - Resolves: RHEL-3335 Rebase to version 2.4.16.11 - Resolves: RHEL-86221 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 1855338 - rebase to upstream version 1.2.1. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1944553 - rebase to upstream version 1.2.2. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - merge fixes from RHEL (r1848298, etc) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Drop EL-6 support - Use %license unconditionally - _httpd_* macros always available - Run directory is always /run on tmpfs - Assume httpd ≥ 2.4 filesystem layout - systemd-units always provided by systemd - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1958882 - mod_fcgid does not pass more than 64 variables to an FCGI server process environment - fix env var truncation to 127 bytes (#1961948) - suppress symbol exports (#1961947) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-14691 - mod_http2 rebase to 2.0.26 - Resolves: RHEL-31855 - mod_http2: httpd: CONTINUATION frames DoS (CVE-2024-27316) - Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) - Resolves: RHEL-182417 - mod_http2: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack (CVE-2026-49975) - Resolves: RHEL-45806 - mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-2024-36387) - Resolves: RHEL-76413 - mod_proxy_http2 failures after CVE-2024-38477 fix - Resolves: RHEL-108706 - CVE-2025-49630 httpd: untrusted input from a client causes an assertion to fail in the Apache mod_proxy_http2 module - Resolves: RHEL-166293 - httpd: Apache HTTP Server: HTTP/2 DoS by Memory Increase (CVE-2025-53020) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add entries for tmpfiles.d mechanism - Remove /var/run legacy location - Resolves: rhbz#2047969 - Related: RHEL-27511 - Rebase to upstream 1.2.49 release - Resolves: RHEL-70161 - Rebuild mod_jk against httpd 2.4.62 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-25075 - new version 2.4.26 - Resolves: RHEL-11838 - [RFE] add support of dns_01 challenge to mod_md - Resolves: RHEL-17462 - OCSP response rejected when nextUpdate field not set - Resolves: RHEL-17467 - mod_md should trigger the reissue of new pair key/certificate when OCSP reports a revoked status - Resolves: RHEL-134496 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) - Resolves: RHEL-134497 - httpd: Apache HTTP Server: mod_md (ACME), unintended retry intervals (CVE-2025-55753) - Resolves: RHEL-175644 - mod_md: OCSP response limits (CVE-2026-29168) - Rebase mod_cluster to upstream 1.3.20.Final tag - Related: RHEL-27497 - Rebase to upstream 1.3.20.Final release - Resolves: RHEL-80864 Rebase mod_proxy_cluster to upstream 1.3.22.Final release - Resolves: RHEL-80864: Bump serial to fix upgrade problems - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947) - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service Vulnerability (CVE-2025-48866) - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe to rotatelogs for SecAuditLog leading to frozen state during graceful restart - Resolves: RHEL-93014 - mod_security: ModSecurity Has Possible DoS Vulnerability (CVE-2025-47947) - Resolves: RHEL-100098 - mod_security: ModSecurity Denial of Service Vulnerability (CVE-2025-48866) - Resolves: RHEL-30628 - mod_security: httpd doesn't close read side of pipe to rotatelogs for SecAuditLog leading to frozen state during graceful restart - Resolves: RHEL-16358 - A form data, "会社"(Company in Japanese) is forbade with REQUEST-941-APPLICATION-ATTACK-XSS.conf of mod_security_crs - Resolves: #RHEL-22733 - mod_security_crs - The rule id:913100 in the REQUEST-913-SCANNER-DETECTION.conf blocks requests with "User-agent: urlgrabber/3.10 yum/3.4.3" - Resolves: RHEL-32964 - new version 3.3.5 - Resolves: RHEL-80178 A form data, "鹿沼市御成橋"(a name of street/city in Japanese) is forbade by mod_security_crs-3.3.4-3.el8.noarch - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Resolves: RHEL-66488 - Apache HTTPD no longer parse PHP files with unicode characters in the name - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - mod_dav: add dav_get_base_path() API - Resolves: RHEL-41069 - Resolves: RHEL-94562 - httpd 2.4.62: mod_proxy_connect prematurely closes connections - Resolves: RHEL-99815 - stickysession field does not work when specifying it in the query parameter after upgrade to 9.5 - Resolves: RHEL-99953 - httpd: HTTP Session Hijack via a TLS upgrade (CVE-2025-49812) - Resolves: RHEL-99968 - httpd: access control bypass by trusted clients is possible using TLS 1.3 session resumption (CVE-2025-23048) - Resolves: RHEL-99977 - httpd: insufficient escaping of user-supplied data in mod_ssl (CVE-2024-47252) - Resolves: RHEL-114501 Image mode: The dir /var/www is not created when updating system in image mode - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-105446 - mod_proxy_hcheck may stop healthchecks after a child process is reclaimed - Resolves: RHEL-119000 - mod_ssl: allow more fine grained SSL SNI vhost check to avoid unnecessary 421 errors after CVE-2025-23048 fix - mod_ssl: add conf.d/snipolicy.conf to set 'SSLVHostSNIPolicy authonly' default - Resolves: RHEL-131827 - Fix error page messaging when error handling fails - Resolves: RHEL-135064 - httpd: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo (CVE-2025-66200) - Resolves: RHEL-135049 - httpd: Apache HTTP Server: CGI environment variable override (CVE-2025-65082) - Resolves: RHEL-134481 - httpd: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... (CVE-2025-58098) - Resolves: RHEL-129692 - [RFE] Need miliseconds time stamp in ErrorLogFormat - Resolves: RHEL-173555 - httpd: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow (CVE-2026-28780) - Resolves: RHEL-175080 - httpd: NULL pointer dereference can cause a child process crash (CVE-2026-33007) - Resolves: RHEL-175100 - httpd: off-by-one out-of-bounds reads in AJP getter functions (CVE-2026-33857) - Resolves: RHEL-175028 - httpd: heap-based buffer over-read due to missing null-termination check (CVE-2026-34032) - Resolves: RHEL-175062 - httpd: heap-based buffer over-read and memory disclosure in ajp_parse_data() (CVE-2026-34059) - Resolves: RHEL-184312 - httpd: ap_regname restrict to reasonable captures (CVE-2026-44631) - Resolves: RHEL-186186 - httpd: mod_proxy_html buffer handling vulnerability (CVE-2026-34355) - Resolves: RHEL-175636 - httpd: mod_dav_lock uses wrong lock discovery (CVE-2026-29169) - Resolves: RHEL-186196 - mod_xml2enc: fix bblen accounting in fix_skipto (CVE-2026-42536) - Resolves: RHEL-186164 - httpd: fix OCSP write buffer advancement bug in mod_ssl (CVE-2026-44185) - Resolves: RHEL-186217 - httpd: Apache HTTP Server: Heap-based Buffer Overflow via malicious backend servers (CVE-2026-34356) - Resolves: RHEL-182578 - httpd: incomplete fix for CVE-2023-38709 (CVE-2024-42516) - Also addresses CVE-2026-24072, CVE-2026-33006, CVE-2026-42535, CVE-2026-43951, CVE-2026-44119, CVE-2026-44186 - Resolves: RHEL-192752 - mod_proxy_html regression in CVE-2026-34355 fix - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Generate profiles section and modulemd-defaults file Related: rhbz#1801747 - Use autosetup to automatically apply patches - Don't traceback because of a modular SRPM in the repo Related: rhbz#2227436 - Replace deprecated LooseVersion - Fix tests for new libmodulemd version 2.15.0 - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap - Add Xinerama support (RHEL-69956) - Keep drop-down menus on the same monitor as the pull-down button with Xinerama Resolves: RHEL-92832 - Fix a memory leak with UTF-8 strings Resolves: RHEL-100816 - Add support for _NET_WORKAREA and _GTK_WORKAREAS Resolves: RHEL-100836 - Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer() - Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap - Add Xinerama support (RHEL-69956) - Keep drop-down menus on the same monitor as the pull-down button with Xinerama Resolves: RHEL-92832 - Fix a memory leak with UTF-8 strings Resolves: RHEL-100816 - Add support for _NET_WORKAREA and _GTK_WORKAREAS Resolves: RHEL-100836 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - install/own %_libdir/mozilla/native-messaging-hosts (rhbz#1619610) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixing files section - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Removed NPAPI from the description, since is no longer supported in Mozilla products Resolves: rhbz#2041339 - Use /usr prefix for the directories Resolves: rhbz#2068486 - Import into RHEL - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jan Vcelak <jvcelak@fedoraproject.org> Jaroslav Škarvada <jskarvad@redhat.com> Jeff Law <law@redhat.com> Lukas Zachar <lzachar@redhat.com> Miro Hrončok <miro@hroncok.cz> Tom Stellard <tstellar@redhat.com> - Fix license information - Split libmpdec++ into a mpdecimal++ subpackage - This prevents packages only using the libmpdec library from transitively depending on libstdc++ - fix use of uninitialized value in sin_cos (RHEL-35392) - add /usr/share/doc/mpfr ownership (RHEL-36690) - add /usr/share/doc/mpfr ownership to the doc subpackage as well (RHEL-36690) - Add patch for CVE-2024-10573 Resolves: RHEL-65445 - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 - Add patch for CVE-2024-10573 Resolves: RHEL-65445 - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 - Add patch for CVE-2024-10573 Resolves: RHEL-65445 - Rebase to 1.32.9, includes patch for CVE-2024-10573 Resolves: RHEL-65445 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to latest version 3.4.2 - Related: rhbz#2015398 - Update to upstream release 4.1.1 - Resolves: rhbz#2212010 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to latest version 3.4.2 - Related: rhbz#2015398 - Update to upstream release 4.1.1 - Resolves: rhbz#2212010 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to latest version 3.4.2 - Related: rhbz#2015398 - Update to upstream release 4.1.1 - Resolves: rhbz#2212010 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to latest version 3.4.2 - Related: rhbz#2015398 - Update to upstream release 4.1.1 - Resolves: rhbz#2212010 - Update OSU benchmarks to upstream release 5.7.1 - Update Intel MPI Benchmarks 2021.2 - Resolves: rhbz#1960479 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OSU benchmarks to upstream release 5.8 - Update Intel MPI Benchmarks 2021.3 - Resolves: rhbz#2015392 - Update OSU benchmarks to upstream release 7.1 - Resolves: rhbz#2220941 - Avoid build failure for i636 - Resolves: rhbz#2220941 - Update OSU benchmarks to upstream release 5.7.1 - Update Intel MPI Benchmarks 2021.2 - Resolves: rhbz#1960479 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OSU benchmarks to upstream release 5.8 - Update Intel MPI Benchmarks 2021.3 - Resolves: rhbz#2015392 - Update OSU benchmarks to upstream release 7.1 - Resolves: rhbz#2220941 - Avoid build failure for i636 - Resolves: rhbz#2220941 - initial build - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to version 0.6 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to version 0.7 - add a simple sanity test and enable gating. Related: rhbz#1962741 - don't overwrite global build options. Related: rhbz#1967697 - fix 'check_conflicts' on multilib. Related: rhbz#1967697 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to version 0.8 - fix mptcpize to work also when protocol number is 0 (upstream issue #159) and when command resides in another file system (upstream issue #161) Related: rhbz#2015623 - workaround for uAPI header build issue - Remove obsolete syslog references from service file Resolves: RHEL-19644 - Add support for Image Mode Resolves: RHEL-142950 - Add support for Image Mode Resolves: RHEL-142950 - Fix CVE-2026-72694: symlink-following chown of pid file in daemon mode Resolves: RHEL-236047 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - rebased to 1.3 (#1849416) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - rebased to 1.4 - install completions to system directory - Fix not working autocompletion - Make will no longer be in BuildRoot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Change UDP and ICMP sockets binding to accept a source IP from the -a CLI option - add smoke test - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2026-25506 - Resolved: RHEL-148533 - Fix CVE-2026-25506 - Resolved: RHEL-148533 - Rebase to upstream version 2.1.5 Resolves: rhbz#2032988 rhbz#1959896 - Rebase to upstream version 2.2.6 Resolves: CVE-2022-1328 - Fix for: CVE-2023-4874 CVE-2023-4875 - Resolves: RHEL-2812 - Backport fix for flicker-free login Resolves: RHEL-10895 - Fix stuck modifier keys Resolves: RHEL-21286 - Do not disable touchscreen on DPMS off if touch-mode is disabled Resolves: RHEL-31742 - Fix polyinstantiation preventing Xwayland to start Resolves: RHEL-90588 - Backport fixes for cogl OpenGL conformance Resolves: RHEL-4521 - Backport fix for screen not refreshing properly Resolves: RHEL-89352 - Fix input latency regression Resolves: RHEL-117098 - Fix handling of more WM_HINTS window icon types Resolves: RHEL-70872 - Backport linux-dmabuf v4 support to restore hardware acceleration in Xwayland 24.1 with Mesa 25.2 Resolves: RHEL-129832 - Sanity check input on workspace activation API Related: RHEL-68825 - Fix stuck modifier keys Resolves: RHEL-21286 - Do not disable touchscreen on DPMS off if touch-mode is disabled Resolves: RHEL-31742 - Fix polyinstantiation preventing Xwayland to start Resolves: RHEL-90588 - Backport fixes for cogl OpenGL conformance Resolves: RHEL-4521 - Backport fix for screen not refreshing properly Resolves: RHEL-89352 - Fix input latency regression Resolves: RHEL-117098 - Fix handling of more WM_HINTS window icon types Resolves: RHEL-70872 - Backport linux-dmabuf v4 support to restore hardware acceleration in Xwayland 24.1 with Mesa 25.2 Resolves: RHEL-129832 - Sanity check input on workspace activation API Related: RHEL-68825 - Don't unminimize mapped windows Resolves: RHEL-180797 - Update to 1.3.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - add gating.yaml file - Update to MySQL 8.0.37 - Remove some legacy cmake options - Use signal to flush logs when rotating - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.46 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Rebase to 8.4.11 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Rebase to 8.4.8 - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Update to MySQL 8.0.37 - Remove some legacy cmake options - Use signal to flush logs when rotating - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.46 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Rebase to 8.4.11 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Rebase to 8.4.8 - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Rebase to 8.4.11 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Rebase to 8.4.8 - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Update to MySQL 8.0.37 - Remove some legacy cmake options - Use signal to flush logs when rotating - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.46 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Rebase to 8.4.11 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Rebase to 8.4.8 - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Update to MySQL 8.0.37 - Remove some legacy cmake options - Use signal to flush logs when rotating - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.46 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Rebase to 8.4.11 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Rebase to 8.4.8 - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Empty commit to test Fedora PACKIT configuration for packaging automation (Michal Schorm) - Bump release for rebuild - Revert "Attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705" This reverts commit de84778e555b891fd9ea5f3111c87a4990650d6c. (Michal Schorm) - Resolves rhbz#2250360 - 2nd attempt to fix rhbz#2186996 rhbz#2221433 rhbz#2245705 (Michal Schorm) - Resolves rhbz#2250424 - Rebase to 1.0.13 - Update to version 1.0.14 - Resolves: rhbz#2380217 - Update to MySQL 8.0.37 - Remove some legacy cmake options - Use signal to flush logs when rotating - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Rebase to version 8.0.39 - Update to MySQL 8.0.40 - Update to MySQL 8.0.41 - Fix patching of logrotate - Rebase to MySQL 8.0.42 - Rebase to MySQL 8.0.43 - Rebase to MySQL 8.0.44 - Rebase to 8.0.45 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.0.46 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Rebase to 8.4.11 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Rebase to 8.4.8 - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Rebase to 8.4.11 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Rebase to 8.4.8 - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Rebase to 8.4.11 - Bump release for a rebuild - Bump release for a rebuild - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Rebase to 8.4.8 - Bump release for a rebuild - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - Rebase to 8.4.3 - Rebase to 8.4.4 - Rebase to 8.4.5 - Rebase to 8.4.6 - Rebase to 8.4.7 - Revert to soft static allocation of MariaDB and MySQL sysusers.d files - Rebase to 8.4.8 - Rebase to 8.4.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update Persian translation from upstream (#2003134) - Update translations for encrypted archives support (#2064754) - Add toolbar action to copy current location (#2098578) - Backport "_Copy Location" translations (#2099982) - Export FileManager1 iface from dbus_register vfunc (#2162302) - Try to own the name until after exporting skeleton (#2162302) - Try current location even if it is marked as gone (#2184292) - Generate thumbnails when the preview icon is available (#2120263) - Force reload current location when it reappears (#2184292) - Fix crashes when dragging from another application (RHEL-12820) - Update Persian translation from upstream (#2003134) - Update translations for encrypted archives support (#2064754) - Add toolbar action to copy current location (#2098578) - Backport "_Copy Location" translations (#2099982) - Export FileManager1 iface from dbus_register vfunc (#2162302) - Try to own the name until after exporting skeleton (#2162302) - Try current location even if it is marked as gone (#2184292) - Generate thumbnails when the preview icon is available (#2120263) - Force reload current location when it reappears (#2184292) - Fix crashes when dragging from another application (RHEL-12820) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 1.16.0 resolves: rhbz#2168628 - Rebase to 1.18.1 resolves: RHEL-14476 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Rebase to 1.20.0 resolves: RHEL-31883 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to libnbd 1.20.3 - Add nbdcopy --blkhash option resolves: RHEL-85509 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - Rebase to 1.38.3 (along stable branch) - Send the last error to the NBD client resolves: RHEL-50664 - Rebase to 1.38.5 (along stable branch) - vddk: Avoid reading partial chunk beyond the end of the disk resolves: RHEL-71694 - Add extra system call checking and debugging to nbdkit-file-plugin resolves: RHEL-85510 - Allow nbdkit-file-plugin to zero and trim block devices resolves: RHEL-89353 - vddk: Pre-cache the extents for readonly connections resolves: RHEL-94823 - Log filename, offset and count in nbdkit-file-plugin error messages resolves: RHEL-95363 - vddk: Improve statistics related: RHEL-94823 - CVE-2025-47711 denial of service attack by client sending maximum size block status - CVE-2025-47712 denial of service attack by client sending large unaligned size block status resolves: RHEL-95814 - Add support for VDDK 9.0.0.0 resolves: RHEL-99466 - server: Fix .zero fallback path resolves: RHEL-101635 - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#2211666) - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) - guard against corrupt terminfo data in string conversion (CVE-2022-29458 RHEL-100135) - remove execute permissions from ANNOUNCE file (RHEL-101067) - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#2211666) - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) - guard against corrupt terminfo data in string conversion (CVE-2022-29458 RHEL-100135) - remove execute permissions from ANNOUNCE file (RHEL-101067) - fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491) - ignore TERMINFO and HOME environment variables if running as root (#2211666) - ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666) - guard against corrupt terminfo data in string conversion (CVE-2022-29458 RHEL-100135) - remove execute permissions from ANNOUNCE file (RHEL-101067) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - fix tests with current OpenSSL (#1863681) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - add bcond for PKCS#11 support - use make macros - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - temporarily disable tests (#1964827) - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - drop libproxy support for RHEL (#1989594) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix changelog issue - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix segfault with error on subcontainer (RHEL-46033) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - remove wrong assert (RHEL-122095) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix changelog issue - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix segfault with error on subcontainer (RHEL-46033) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - remove wrong assert (RHEL-122095) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix changelog issue - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix segfault with error on subcontainer (RHEL-46033) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - remove wrong assert (RHEL-122095) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix changelog issue - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix segfault with error on subcontainer (RHEL-46033) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - remove wrong assert (RHEL-122095) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix changelog issue - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix segfault with error on subcontainer (RHEL-46033) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - remove wrong assert (RHEL-122095) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix changelog issue - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix segfault with error on subcontainer (RHEL-46033) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - remove wrong assert (RHEL-122095) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - update to https://github.com/containers/netavark/releases/tag/v1.13.1 - Related: RHEL-60277 - update to https://github.com/containers/netavark/releases/tag/v1.14.0 - Related: RHEL-60277 - update to https://github.com/containers/netavark/releases/tag/v1.14.1 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.15.0 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.15.1 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.15.2 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.16.0 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.16.1 - Related: RHEL-80816 - update to https://github.com/containers/netavark/releases/tag/v1.17.1 - Related: RHEL-111919 - update to https://github.com/containers/netavark/releases/tag/v1.17.2 - Related: RHEL-111919 - remove broken patch (RHEL-23298) - remove broken patch (RHEL-23298) - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94421 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.108 and Runtime 9.0.7 - Resolves: RHEL-100599 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.109 and Runtime 9.0.8 - Resolves: RHEL-106728 - Update to .NET SDK 9.0.110 and Runtime 9.0.9 - Resolves: RHEL-112269 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Update to .NET SDK 9.0.111 and Runtime 9.0.10 - Resolves: RHEL-116858 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.112 and Runtime 9.0.11 - Resolves: RHEL-125743 - Update to .NET SDK 9.0.113 and Runtime 9.0.12 - Resolves: RHEL-138645 - Update to .NET SDK 9.0.114 and Runtime 9.0.13 - Resolves: RHEL-144970 - Update to .NET SDK 9.0.115 and Runtime 9.0.14 - Resolves: RHEL-152945 - Update to .NET SDK 9.0.116 and Runtime 9.0.15 - Resolves: RHEL-163397 - Update to .NET SDK 9.0.117 and Runtime 9.0.16 - Resolves: RHEL-173918 - Update to .NET SDK 9.0.118 and Runtime 9.0.17 - Resolves: RHEL-181553 - Reduce time to detect hanging builds - Resolves: RHEL-191646 - Update to .NET SDK 9.0.119 and Runtime 9.0.18 - Resolves: RHEL-192472 - Update to .NET SDK 9.0.120 and Runtime 9.0.19 - Resolves: RHEL-235476 - Update to nettle 3.9.1 (RHEL-14890) - Update to nettle 3.10.1 (RHEL-52740) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move desktop file to new nm-connection-editor-desktop package (rh #1923262) - Update to 1.20.0 release - Drop NotShowIn=GNOME - Use wireless-security code from libnma - Add flatpak build configuration - applet: hide unmanaged ethernet devices in nm-applet - applet: fix Wi-Fi scan requests with appindicator - editor: fix drop down list for connection.secondaries - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.22.0 release. - editor: show missing toggle in the 8021x-security page. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.24.0 release - Fix OWE settings disappearing on nm-connection-editor (rh #2057004) - Update to 1.26.0 release (rh #2066750) - Update Japanese translation (rh #2083047) - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - disable python2 subpackage on fedora >= 32 (#1763073) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add nfs.conf to nfsv4-client-utils package (RHEL-72013) - mountstats/nfsiostat: bugfixes for iostat (RHEL-72243) - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143) - nfsd: allow more than 64 backlogged connections (RHEL-87752) - mountstats: verify that old and new types are the same (RHEL-88553) - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408) - gssd: do not use krb5_cc_initialize (RHEL-85412) - ensure services are stopped when nfs-utils is uninstalled (RHEL-88422) - Fix dependency definition in rpc-statd.service (RHEL-116079) - nfsrahead: modify get_device_info logic (RHEL-134397) - gssd: protect kerberos ticket cache access (RHEL-138462) - Replace statfs64 with statfs (RHEL-127105) - NFS export symlink vulnerability fix (RHEL-127105) - mountd: Minor refactor of get_rootfh() (RHEL-127105) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105) - Add requires for selinux-policy (RHEL-127105) Resolves: CVE-2025-12801 - Add nfs.conf to nfsv4-client-utils package (RHEL-72013) - mountstats/nfsiostat: bugfixes for iostat (RHEL-72243) - nfs(5): Add new rdirplus functionality, clarify (RHEL-87143) - nfsd: allow more than 64 backlogged connections (RHEL-87752) - mountstats: verify that old and new types are the same (RHEL-88553) - gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408) - gssd: do not use krb5_cc_initialize (RHEL-85412) - ensure services are stopped when nfs-utils is uninstalled (RHEL-88422) - Fix dependency definition in rpc-statd.service (RHEL-116079) - nfsrahead: modify get_device_info logic (RHEL-134397) - gssd: protect kerberos ticket cache access (RHEL-138462) - Replace statfs64 with statfs (RHEL-127105) - NFS export symlink vulnerability fix (RHEL-127105) - mountd: Minor refactor of get_rootfh() (RHEL-127105) - mountd: Separate lookup of the exported directory and the mount path (RHEL-127105) - support: Add a mini-library to extract and apply RPC credentials (RHEL-127105) - Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105) - Add requires for selinux-policy (RHEL-127105) Resolves: CVE-2025-12801 - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-78236 - nginx: TLS Session Resumption Vulnerability (CVE-2025-23419) - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-6786 - SSL-errors 0A000126 / NS_NET_ERROR_PARTIAL_TRANSFER at nginx with reverse-proxy - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-84477 - nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-85556 - nginx: Memory disclosure in the ngx_http_mp4_module (CVE-2022-41742) - Resolves: RHEL-91446 - nginx: Memory corruption in the ngx_http_mp4_module (CVE-2022-41741) - Resolves: RHEL-114935 - Image mode: The dir /var/lib and /var/log is not created when updating system in image mode - Resolves: RHEL-102548 - Remove 50x.html for nginx 1.26 - Resolves: RHEL-145177 - Clarify binding behavior of -t option - Resolves: RHEL-146528 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connection - RHEL-159560 CVE-2026-27654 nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - RHEL-159539 CVE-2026-27784 nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - RHEL-159447 CVE-2026-27651 nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - RHEL-157888 CVE-2026-32647 nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176232 - nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178684 - nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182553 - nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-190800 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188418 - nginx: NGINX: Arbitrary code execution or Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Resolves: RHEL-32650 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40621 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49349 - nginx worker processes memory leak - Resolves: RHEL-84484 - nginx:1.22/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Debrand for AlmaLinux - Fix CVE-2026-42945 nginx: NGINX: Buffer overrun in rewrite module via arguments in replacement strings - Resolves: RHEL-38498 - Nginx seg faults when proxy_ssl_certificate is set - Resolves: RHEL-40622 - openssl 3.2 ENGINE regression in nginx - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Debrand for AlmaLinux - Resolves: RHEL-49350 - nginx worker processes memory leak - Resolves: RHEL-84480 - nginx:1.24/nginx: specially crafted MP4 file may cause denial of service (CVE-2024-7347) - Resolves: RHEL-146529 - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - Resolves: RHEL-157889 CVE-2026-32647 nginx:1.24/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-159448 CVE-2026-27651 nginx:1.24/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - Resolves: RHEL-159561 CVE-2026-27654 nginx:1.24/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - Resolves: RHEL-159540 CVE-2026-27784 nginx:1.24/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - Resolves: RHEL-176234 - nginx:1.24/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Resolves: RHEL-178681 - nginx:1.24/nginx: code execution and denial of service (CVE-2026-9256) - Resolves: RHEL-182554 - nginx:1.24/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191773 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Resolves: RHEL-188413 - nginx: NGINX: Arbitrary code execution or. Denial of Service via heap-based buffer overflow with crafted HTTP/2 headers (CVE-2026-42055) - Debrand for AlmaLinux - Use systemd-sysusers - New version 1.26.3 - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - Add tmpfiles.d rules for /var directories (bootc compatibility) - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-144454 - Clarify binding behavior of -t option - CVE-2026-1642 nginx: NGINX: Data injection via man-in-the-middle attack on TLS proxied connections - CVE-2026-27654 nginx:1.26/nginx: NGINX: Denial of Service or file modification via buffer overflow in ngx_http_dav_module - CVE-2026-27784 nginx:1.26/nginx: NGINX: Denial of Service due to memory corruption via crafted MP4 file - CVE-2026-27651 nginx:1.26/nginx: NGINX: Denial of Service via undisclosed requests when ngx_mail_auth_http_module is enabled - CVE-2026-32647 nginx:1.26/nginx: NGINX: Denial of Service or Code Execution via specially crafted MP4 files - Resolves: RHEL-176218 - nginx:1.26/nginx: NGINX: Arbitrary Code Execution Vulnerability (CVE-2026-42945) - nginx: code execution and denial of service (CVE-2026-9256) - nginx:1.26/nginx: HTTP/2: Remote Denial of Service via compression bomb and Slowloris-style attack - Resolves: RHEL-191774 - nginx: "HTTP/2 bomb" nginx fix breaks module ABI causing crashes - Upgrade to 1.2.2. Resolves: RHBZ#1996623 - Upgrade to 1.2.3. Resolves: RHBZ#1996623 - Upgarde to 1.2.4. RHBZ#2064299 - Upgrade to 1.2.7. - Upgrade to 1.2.9. RHBZ#2153165 - Upgrade to 1.2.10. RHBZ#2153165 - New release 1.2.12 (Gris Ge) - Use latest rust-netlink crates (Gris Ge) - New release 1.2.14 (Gris Ge) - bond: support changing bond mode (Gris Ge) - Reorganize the code structure (Gris Ge) - CI: Enable VRF and ethool pause test (Gris Ge) - CI: Upgrade the version of github action tasks (Gris Ge) - test: Fix ethtool link mode test on Ubuntu (Gris Ge) - Github CI: Install extra module of running kernel (Gris Ge) - macsec: add base_iface property (Fernando Fernandez Mancera) - macsec: add MACsec interface support (Fernando Fernandez Mancera) - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Move desktop file to new nm-connection-editor-desktop package (rh #1923262) - Update to 1.20.0 release - Drop NotShowIn=GNOME - Use wireless-security code from libnma - Add flatpak build configuration - applet: hide unmanaged ethernet devices in nm-applet - applet: fix Wi-Fi scan requests with appindicator - editor: fix drop down list for connection.secondaries - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.22.0 release. - editor: show missing toggle in the 8021x-security page. - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.24.0 release - Fix OWE settings disappearing on nm-connection-editor (rh #2057004) - Update to 1.26.0 release (rh #2066750) - Update Japanese translation (rh #2083047) - Support EMS in ssl-enum-ciphers - Update fmf plans and gating - Resolves: RHEL-130816 - Nmap scans fail with enic driver - Remove obsolete alternatives left behind after leapp upgrade from RHEL8 to RHEL9 Resolves: RHEL-101161 - Support EMS in ssl-enum-ciphers - Update fmf plans and gating - Resolves: RHEL-130816 - Nmap scans fail with enic driver - Remove obsolete alternatives left behind after leapp upgrade from RHEL8 to RHEL9 Resolves: RHEL-101161 - Upgrade to 2.2.25 - Fix stuck of nmstatectl show on OVS. RHEL-93176 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91291 - Support nmpolicy against down iface. RHEL-88989 - Support removal VLAN connection with empty ifname. RHEL-93146 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Upgrade to 2.2.25 - Fix stuck of nmstatectl show on OVS. RHEL-93176 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91291 - Support nmpolicy against down iface. RHEL-88989 - Support removal VLAN connection with empty ifname. RHEL-93146 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Update version of bundled nghttp2 in spec file - Fix CVE-2024-22019 - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Use system OpenSSL configuration section - Backport patch for CVE-2024-27982 - Actually apply the patch for CVE-2024-27982 - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Removes .ps1 files - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 20.18.1 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Disable npm's update-notifier Resolves: RHEL-81078 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Update to version 20.19.1 Resolves: RHEL-78764 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-100426 - Update to 22.22.0 Resolves: RHEL-141879 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - Switch to compilation using gcc-toolset-12 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - deps: update sqlite to 3.53.4 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Removes .ps1 files - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 20.18.1 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Disable npm's update-notifier Resolves: RHEL-81078 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Update to version 20.19.1 Resolves: RHEL-78764 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-100426 - Update to 22.22.0 Resolves: RHEL-141879 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - Switch to compilation using gcc-toolset-12 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - deps: update sqlite to 3.53.4 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Update version of bundled nghttp2 in spec file - Fix CVE-2024-22019 - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Use system OpenSSL configuration section - Backport patch for CVE-2024-27982 - Actually apply the patch for CVE-2024-27982 - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Removes .ps1 files - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 20.18.1 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Disable npm's update-notifier Resolves: RHEL-81078 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Update to version 20.19.1 Resolves: RHEL-78764 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-100426 - Update to 22.22.0 Resolves: RHEL-141879 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - Switch to compilation using gcc-toolset-12 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - deps: update sqlite to 3.53.4 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Update version of bundled nghttp2 in spec file - Fix CVE-2024-22019 - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Use system OpenSSL configuration section - Backport patch for CVE-2024-27982 - Actually apply the patch for CVE-2024-27982 - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Removes .ps1 files - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 20.18.1 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Disable npm's update-notifier Resolves: RHEL-81078 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Update to version 20.19.1 Resolves: RHEL-78764 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-100426 - Update to 22.22.0 Resolves: RHEL-141879 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - Switch to compilation using gcc-toolset-12 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - deps: update sqlite to 3.53.4 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Update version of bundled nghttp2 in spec file - Fix CVE-2024-22019 - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Use system OpenSSL configuration section - Backport patch for CVE-2024-27982 - Actually apply the patch for CVE-2024-27982 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-100426 - Update to 22.22.0 Resolves: RHEL-141879 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - Switch to compilation using gcc-toolset-12 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - deps: update sqlite to 3.53.4 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 2.0.19 Resolves: CVE-2022-33987 rhbz#2073156 CVE-2021-33502 CVE-2021-3807 CVE-2020-28469 Resolves: CVE-2020-7788 - Rebase to 2.0.20 Resolves: CVE-2022-3517 - Record CVE fixed in the current or previous upstream versions - Resolves: CVE-2021-44906 - Patch bundled glob-parent - Resolves: CVE-2021-35065 - Resolves: RHBZ#2005419 - Resolves CVE-2020-28469 - Rebase to newest version - Change source to npmjs.com - Rebase to 2.0.20 Resolves: CVE-2022-3517 - Patch bundled glob-parent - Resolves: CVE-2021-35065 - Rebase to 3.0.1 - Resolves: CVE-2022-25883 - Resolves: RHBZ#2005419 - Resolves CVE-2020-28469 - Rebase to newest version - Change source to npmjs.com - Rebase to 2.0.20 Resolves: CVE-2022-3517 - Patch bundled glob-parent - Resolves: CVE-2021-35065 - Rebase to 3.0.1 - Resolves: CVE-2022-25883 - Resolves: RHBZ#2005419 - Resolves CVE-2020-28469 - Rebase to newest version - Change source to npmjs.com - Rebase to 2.0.20 Resolves: CVE-2022-3517 - Patch bundled glob-parent - Resolves: CVE-2021-35065 - Rebase to 3.0.1 - Resolves: CVE-2022-25883 - Fix BR for nodejs-npm - Keep BR on just npm - Rebase to 3.1.14 - Change %setup -q /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch - Resolves: RHEL-208677 - Fix BR for nodejs-npm - Keep BR on just npm - Update to version 3.1.14 - Correction to sources for 3.1.14. - Rebase to 3.1.14 - Change %setup -q /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch - Resolves: RHEL-153975 RHEL-153974 - Rebase to 3.1.14 - Change %setup -q /usr/bin/cat /builddir/build/SOURCES/0001-deps-glob-parent-Resolve-ReDoS-vulnerability-from-CV.patch | /usr/bin/patch -s --fuzz=0 --no-backup-if-mismatch - Resolves: RHEL-153975 RHEL-153974 - Fix BR for nodejs-npm - Keep BR on just npm - Update to version 3.1.14 - Correction to sources for 3.1.14. - Fix CVE-2026-69152 - brace-expansion - Check node_modules_prod for bundled dependencies - Fix incorrect bundled library detection for Requires - Move to dist-git as the upstream - Add nodejs-packaging-bundler and update README.md - nodejs-packaging-bundler improvements to handle uncommon characters - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2021.06-1 - bundler: Handle archaic license metadata - bundler: Warn about bundled dependencies with no license metadata - Fix hard-coded output directory in the bundler - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - NPM bundler: also find namespaced bundled dependencies - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121581 - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-153905 - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-153905 - Check node_modules_prod for bundled dependencies - Fix incorrect bundled library detection for Requires - Move to dist-git as the upstream - Add nodejs-packaging-bundler and update README.md - nodejs-packaging-bundler improvements to handle uncommon characters - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2021.06-1 - bundler: Handle archaic license metadata - bundler: Warn about bundled dependencies with no license metadata - Fix hard-coded output directory in the bundler - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - NPM bundler: also find namespaced bundled dependencies - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-121581 - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-153905 - nodejs.req to properly detect bundled deps - Properly handle @group/package deps in nodejs-symlink-deps Resolves: RHEL-153905 - Fix segfault that happens when processing fips-related options Resolves: BZ#2226726 - Rebase to version 18.17.1 Resolves: rhbz#2228940 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Specify proper OpenSSL configuration section build Related: rhbz#2226726 - Rebase to version 18.19.0 Resolves: RHEL-21436 - Rebase to version 18.19.1 - Fixes: CVE-2024-21892 CVE-2024-22019 (high) - Fixes: CVE-2023-46809 (medium) - Rebase to 18.20.2 - Fix: CVE-2024-27983, CVE-2024-28182, CVE-2024-27982, CVE-2024-25629 - Removes .ps1 files - Update to 18.20.4 Fixes: CVE-2024-22020 CVE-2024-28863 - Update to version 18.20.6 Resolves: RHEL-76801 Fixes: CVE-2025-23085 - Disable npm's update-notifier Resolves: RHEL-81091 - Update to version 18.20.8 Resolves: RHEL-88884 RHEL-89802 - Update to 20.17.0 Resolves: RHEL-58721 - Update to version 20.18.1 - Update to version 20.18.2 Fixes: CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76363 RHEL-76554 RHEL-76540 - Disable npm's update-notifier Resolves: RHEL-81078 - Update c-ares to 1.34.5 to address CVE-2025-31498 - Update to version 20.19.1 Resolves: RHEL-78764 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 - Update to version 20.19.5 Resolves: RHEL-114749 - Update to version 20.20.0 Resolves: RHEL-141917 - Update to version 20.20.2 Patch nghttp2 to version 1.68.1 and disable tests which would fail due to this change. Resolves: RHEL-164336 Fixes: CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 CVE-2026-21710 - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-100426 - Update to 22.22.0 Resolves: RHEL-141879 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - Switch to compilation using gcc-toolset-12 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - deps: update sqlite to 3.53.4 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Rebase to 16.20.1 Resolves: rhbz#2188291 Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 - Replace /usr/etc/npmrc symlink with builtin configuration Resolves: rhbz#2177781 - Fix segfault that happens when processing fips-related options Resolves: BZ#2227796 - Rebase to 16.20.2 Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 - Update bundled nghttp2 to 1.57.0 (CVE-2023-44487) - Update version of bundled nghttp2 in spec file - Fix CVE-2024-22019 - Backport patches for several CVEs. Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182 - Use system OpenSSL configuration section - Backport patch for CVE-2024-27982 - Actually apply the patch for CVE-2024-27982 - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Pointless rebuild to re-trigger gating etc - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Add SEC_OID_CURVE25519 to FIPS checks. - This will mark algorithms using it as FIPS unapproved. - Allow RSA-OAEP in FIPS mode - rebase to NSS 3.112 - add ml-kem-1024 support - add ml-dsa support - add fips required changes. - fix bugs found by QE - restore CONCATENATE functions accidentally removed in the last patch - fix big endian issue in tstclnt and selfserv in certificate compression - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly - fips update - Fix indicators for the new post-quantum algorithms - Fix the ML-KEM Self-tests - Fix the ML-KEM zeroizaiton - Add partial public validation before OAEP - bug fixes - add CKA_SEED to private attributes so they are updated on password change. - mark CKA_PARAMETER_SET as CK_ULONG when storing into the database - fix unrefrence read in leancrypto. - fix a null in ml-dsa pkcs12 decode - fix return code in ml-kem pct - fix regression in -5 bug fix - fix incomplete ml-kem pct patch. - rebase to upstream NSS 3.124 - backport ml-dsa support that is not upstream yet. - pick up in process patches upstream including eddsa - rebase fixes - restore rhel-9 dropping of pkcs12 and smime policy - restore mlkem aliases - add mlkem key lengths to the mechanism info - fix crash if you try to encapsulate with an unimported public key - restore distrusted certs to certdata.txt even though we never reference them to make tests happy. - drop crmf - fix pkcs12 defaults - fix pss issues - fix pss issues (again) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install smaller footprint - resolves: rhbz#2139666 - Rebase to version 1.1.12 - related: rhbz#2139666 - Rebase to version 1.1.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - resolves: rhbz#2028819 - Introduce nss_wrapper-libs package to allow install smaller footprint - resolves: rhbz#2139666 - Rebase to version 1.1.12 - related: rhbz#2139666 - Rebase to version 1.1.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to 0.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - switch dependency from ntp to ntpsec - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - ci: Add CodeQL to replace LGTM - alternatives: replace master/slave with leader/follower - chkconfig: use correct cmp function - Bump redhat-plumbers-in-action/differential-shellcheck from 2 to 3 - ci: Add Shell linter - Differential ShellCheck - ci: Use more inclusive terminology in workflows - ci: Update workflows, packit and dependabot - Translated using Weblate (Friulian) - Translated using Weblate (Swedish) - Translated using Weblate (Estonian) - Translated using Weblate (Georgian) - Translated using Weblate (Polish) - Translated using Weblate (Korean) - Translated using Weblate (Czech) - Translations update from Fedora Weblate (#77) - Translations update from Fedora Weblate (#75) - Translations update from Fedora Weblate (#74) - Translations update from Fedora Weblate (#73) - Translated using Weblate (Ukrainian) - Update translation files - Family mentioned for --set in both man and help - Translated using Weblate (French) - build-sys: Ensure `systemd-sysv-install` symlink does not have `//` - Translated using Weblate (German) - Add LGTM badges to README - Merge remote-tracking branch 'weblate/master' - Translated using Weblate (Indonesian) - Translated using Weblate (Finnish) - Translated using Weblate (Korean) - Translated using Weblate (Ukrainian) - Translated using Weblate (Turkish) - Translated using Weblate (Polish) - Translated using Weblate (Norwegian Nynorsk) - Update translation files - Translated using Weblate (Finnish) - Translated using Weblate (Czech) - Translated using Weblate (Swedish) - Translated using Weblate (Italian) - Translated using Weblate (Spanish) - Translated using Weblate (Chinese (Simplified)) - migrate to SPDX license - Translated using Weblate (English (United Kingdom)) - Translated using Weblate (Japanese) - ci: Add locale linter - ci: update workflows - test: fix ShellCheck error[SC2070] - Bump redhat-plumbers-in-action/differential-shellcheck from 3 to 4 (#94) - releng: Packit remove extra job trigger - releng: Enable Packit to handle Fedora updates - releng: Convert to rpmautospec - Translated using Weblate (Korean) - Translated using Weblate (English (United Kingdom)) - alternatives: --keep-foreign incorrectly handles non-existent files - alternatives: isLink should return 0 in case of lstat error - Translated using Weblate (Swedish) - Translated using Weblate (Korean) - Translated using Weblate (Georgian) - Translated using Weblate (Finnish) - Translated using Weblate (Ukrainian) - Translated using Weblate (Polish) - Update translation files - Translated using Weblate (German) - doc: update translations - spec: remote changelog - ci: fix `NEXT_VERSION` in Makefile - revert: releng: Enable Packit to handle Fedora updates - revert: releng: Convert to rpmautospec - ostree: move admindir to /etc/alternatives.admindir (RHEL-57665) - Dummy release to get s390x binary in errata - fix typo in memhog.8 - rebase to v2.0.18 - rebase to v2.0.19 - Upstream v1.0 Release Candidate 7 - Upstream v1.0 official release - Update to version 1.1.4 - Update to version 1.1.6 - Rebuild for CentOS Stream - Sync with the official 1.1.6 version - Update to the latest v2.0 package - Update to the v2.1.1 package - Update to version v2.2.1 - Rebuild the package for side-tag - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Remove support for native profiling, see: https://github.com/ocaml/ocaml/pull/2314 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9 - Related: #2176063 - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10 - Related: RHEL-2112 - rebuild - Resolves: RHEL-35939 - rebuild - Resolves: RHEL-69918 - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11 - simplify spec - Resolves: RHEL-86603 - rebuild - Resolves: RHEL-35939 - rebuild - Resolves: RHEL-69918 - update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11 - simplify spec - Resolves: RHEL-86603 - rebuild for CVE-2026-33811 Resolves: RHEL-187325 - Drop Recommends for OCL implementations - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fix build with gcc10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 2.2.13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - upstream release 0.34.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix stdin redirection in RPM scripts Resolves: rhbz#2041585 - Add a non-default option to revert behavior for CVE-2020-10737 fix - Resolved: rhbz#2119265 - Always set the home directory permissions according to HOME_MODE - Resolves: rhbz#2149988 - upstream release 0.34.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix stdin redirection in RPM scripts Resolves: rhbz#2041585 - Add a non-default option to revert behavior for CVE-2020-10737 fix - Resolved: rhbz#2119265 - Always set the home directory permissions according to HOME_MODE - Resolves: rhbz#2149988 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add CI tests - Enable gating - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Added junit dependency - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 1.9-beta1 - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0" - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Added junit dependency - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 1.9-beta1 - change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0" - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix FTBFS (rhbz#1865148) - Set __cmake_in_source_build - BR qt5-qtbase-devel to keep the GUI frontend - Only build portaudio-backend on Fedora - Only build fluidsynth support on Fedora - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Only build SDL_sound support on Fedora and rhel < 9 - Resolves: rhbz#1989141 - Don't package some examples when SDL_sound is disabled - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Update to 0.3.26 - Resolves: RHEL-20160 - Re-include openblas.pc - Resolves: RHEL-20160 - Update to 0.3.29 - Resolves: RHEL-77185 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: RHEL-33645 (Rebuild against samba 4.20) - Related: RHEL-59788 (Rebuild against samba 4.21) - Related: RHEL-89873 (Rebuild against samba 4.22) - Related: RHEL-114548 (Rebuild against samba 4.23) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix - Bump CLHPP version to 2.0.11 - Update to latest upstream, pick up new extensions for OpenCL-CTS build fix - Rework CLHPP handling as file is not downloadable anymore - Bump CLHPP version to 2.0.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update latest headers - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use systemd-sysusers to create users Resolves: RHEL-75905 - Exclude i686 arch, as there's no OpenJDK 17 for this arch Resolves: RHEL-75905 - Don't package files in obsoleted /var/run Resolves: RHEL-4866 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-27622 - fix CVE-2026-34588 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-27622 - fix CVE-2026-34588 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-27622 - fix CVE-2026-34588 - fix CVE-2023-5481 (RHEL-23879) - fix CVE-2026-27622 - fix CVE-2026-34588 - fix CVE-2026-41142 - fix CVE-2026-42216 - fix two heap buffer overflows CVE-2024-56826 and CVE-2024-52827 (RHEL-72519,RHEL-72521) - Rebase OpenLDAP to 2.6.3 Related: rhbz#2212983 - Rebase OpenLDAP in RHEL 9.4 Resolves: RHEL-11306 - The client tools parameters '-h' and '-p' are still deprecated, but this release brings back the client tools options that were removed during the previous rebase. Resolves: RHEL-19384 - Use systemd-sysusers for ldap user and group Replace License with SPDX identifier Resolves: RHEL-5140 - Disable MD2 hash algorithm Resolves: RHEL-59715 - Rebase to version 2.6.8 (RHEL-71053) - Avoid SSL context cleanup during library destruction (RHEL-56502) - Replace baseos-ci tests with osci (RHEL-71053) - Migrate gating tests from STI to FMF (RHEL-71053) - Fix TLS connection timeout handling (RHEL-78297) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Revert v4.1.2 - Add Epoch tag - Resolves: rhbz#2055184 - Revert v4.1.5 - Bump version - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Increase Epoch tag - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Revert v4.1.2 - Add Epoch tag - Resolves: rhbz#2055184 - Revert v4.1.5 - Bump version - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Increase Epoch tag - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Revert v4.1.2 - Add Epoch tag - Resolves: rhbz#2055184 - Revert v4.1.5 - Bump version - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Increase Epoch tag - Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042 - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Explicitely disable dpkginfo probe - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Add AlmaLinux definitions - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-167949) - Add AlmaLinux definitions - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Explicitely disable dpkginfo probe - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Add AlmaLinux definitions - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-167949) - Add AlmaLinux definitions - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Explicitely disable dpkginfo probe - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Add AlmaLinux definitions - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-167949) - Add AlmaLinux definitions - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Explicitely disable dpkginfo probe - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Add AlmaLinux definitions - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-167949) - Add AlmaLinux definitions - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Explicitely disable dpkginfo probe - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Add AlmaLinux definitions - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-167949) - Add AlmaLinux definitions - Rebase to the latest upstream version (RHEL-29172) - Fix OVAL results file name (RHEL-7050) - Add ability to define a limit of collected items (RHEL-4141) - Add ability to refine rules in autotailor (RHEL-1477) - Improve the formatting of Blueprint remediations (RHEL-1476) - Explicitely disable dpkginfo probe - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Add AlmaLinux definitions - Switch gating to tmt plan (RHEL-43241) - Upgrade to the latest upstream release (RHEL-76355) - Introduce "oscap-im", a tool for building hardened bootable container images - Fix RPM probes in bootable container images build environment (RHEL-55251) - Upgrade to the latest upstream release (RHEL-88413) - Fix OSCAP_PROBE_IGNORE_PATHS handling - Upgrade to the latest upstream release (RHEL-133976) - Fix Filepath and Pattern Fields inversion (RHEL-104073) - Fix verbose flag (RHEL-53859) - Upgrade to the latest upstream release (RHEL-167949) - Add AlmaLinux definitions - Fix heap overwrite vulnerability, CVE-2019-5544 Resolves: #1780754 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Explicitly disable use of deprecated SHA-1 algorithm Resolves: #1936621 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix heap overwrite vulnerability, CVE-2019-5544 Resolves: #1780754 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Explicitly disable use of deprecated SHA-1 algorithm Resolves: #1936621 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase opensm to latest upstream release 3.3.23 - Resolves: bz1813779 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update systemd service file - opensm service should after rdma-hw.target - Use make macros https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebase opensm to latest upstream release 3.3.24 - Resolves: bz1961963 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Move the redhat help message to debug1 log level Resolves: RHEL-104580 - Rebase to version 9.9 Resolves: RHEL-108912 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-119515 - Canonicalize username when matching a user Resolves: RHEL-118372 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Version bump - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Unpatch Red Hat help message - Rebase to version 9.9 Resolves: RHEL-108912 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-119515 - Canonicalize username when matching a user Resolves: RHEL-118372 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Version bump - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - Unpatch Red Hat help message - Fix regressions caused by rebase to OpenSSL 3.5 Related: RHEL-80854 - Compact patches for better maintainability Related: RHEL-80854 - Make hybrid MLKEM work with our FIPS provider (3.0.7) Resolves: RHEL-95239 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Compact patches for better maintainability Related: RHEL-80854 - Make hybrid MLKEM work with our FIPS provider (3.0.7) Resolves: RHEL-95239 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Fix CVE-2026-28390 Resolves: RHEL-165870 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Fix CVE-2026-28390 Resolves: RHEL-165870 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Fix CVE-2026-28390 Resolves: RHEL-165870 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210862 - Fix regressions caused by rebase to OpenSSL 3.5 Related: RHEL-80854 - Compact patches for better maintainability Related: RHEL-80854 - Make hybrid MLKEM work with our FIPS provider (3.0.7) Resolves: RHEL-95239 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Compact patches for better maintainability Related: RHEL-80854 - Make hybrid MLKEM work with our FIPS provider (3.0.7) Resolves: RHEL-95239 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Fix CVE-2026-28390 Resolves: RHEL-165870 - Rebasing to OpenSSL 3.5.1 Resolves: RHEL-97797 Resolves: RHEL-98723 Resolves: RHEL-99352 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Fix CVE-2026-28390 Resolves: RHEL-165870 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Move fips.so to a seprate subpackage Reverts FIPS self test for SLH-DSA Add Suggests to try to prefer the openssl-fips-provider package over the fips-provider-next package by default Revolves: RHEL-102408 Related: RHEL-80854 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Fix CVE-2026-28390 Resolves: RHEL-165870 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 - Add custom define to disable symbol versioning in downstream patched code Also add stricter Suggests for openssl-fips-provider Resolves: RHEL-104236 - Fix Requires/Provider to fix default install of fips providers Resolves: RHEL-104856 - Make openssl speed test signatures without errors Resolves: RHEL-95502 - Build tests in check and without LTO Resolves: RHEL-111633 - Fix globally disabled LTO Related: RHEL-111633 - Fix CVE-2025-9230 Resolves: RHEL-115928 - Rebase to OpenSSL 3.5.5 Resolves: RHEL-136895 Resolves: RHEL-142004 Resolves: RHEL-142012 Resolves: RHEL-142020 Resolves: RHEL-142024 Resolves: RHEL-142028 Resolves: RHEL-142032 Resolves: RHEL-142036 Resolves: RHEL-142040 Resolves: RHEL-142044 Resolves: RHEL-142048 Resolves: RHEL-142052 Resolves: RHEL-142056 - Fix CVE-2026-31790 Resolves: RHEL-161586 - Fix CVE-2026-28390 Resolves: RHEL-165870 Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183, CVE-2026-42764, CVE-2026-42766, CVE-2026-42767, CVE-2026-42768, CVE-2026-42769, CVE-2026-42770, CVE-2026-45445, CVE-2026-45446, CVE-2026-45447, CVE-2026-34182. Resolves: RHEL-179274 Resolves: RHEL-179287 Resolves: RHEL-179539 Resolves: RHEL-179544 Resolves: RHEL-179547 Resolves: RHEL-179552 Resolves: RHEL-179556 Resolves: RHEL-179633 Resolves: RHEL-179661 Resolves: RHEL-179678 Resolves: RHEL-179684 Resolves: RHEL-179688 Resolves: RHEL-179691 Resolves: RHEL-179696 Resolves: RHEL-179699 - Patch asn1_d2i_read_bio to read headers without blocking Resolves: RHEL-178642 - Patch asn1_d2i_read_bio to not raise NOT_ENOUGH_DATA at object boundary Resolves: RHEL-210862 - Bump revision - Update expr v1.16.9 to v1.17.0 - Remove explicit go toolchain dependency - Update addresses CVE-2025-29786 Resolves: RHEL-83841 - Bump revision - Update go-jose v4.0.2 to v4.0.5 - Update testify v1.9.0 to v1.10.0 - Update addresses CVE-2025-27144 Resolves: RHEL-82967 - Bump revision - Update golang-jwt v5.2.1 to v5.2.2 - Update addresses CVE-2025-30204 Resolves: RHEL-85033 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90050 - Bump revision - Go version update to v1.24.4 - Update addresses CVE-2025-4673 Resolves: RHEL-105058 - Version bump to 0.135.0 - Add systemd-journal group to Requires(pre) - Bump go-tpm-keyfiles Resolves: RHEL-119812 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 Resolves: RHEL-136447 - Update Go to 1.25.5 - Addresses CVE-2025-61729 Resolves: RHEL-140554 - Update to v0.144.0 - Addresses CVE-2025-61726, CVE-2025-68121 Resolves: RHEL-148516 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 Resolves: RHEL-158777, RHEL-160842, RHEL-165038, RHEL-166685, RHEL-167683, RHEL-167395, RHEL-166351 - Bump revision - Update go-jose v4.0.2 to v4.0.5 - Update testify v1.9.0 to v1.10.0 - Update addresses CVE-2025-27144 Resolves: RHEL-82967 - Bump revision - Update golang-jwt v5.2.1 to v5.2.2 - Update addresses CVE-2025-30204 Resolves: RHEL-85033 - Collector version update - Go version update to v1.23.9 - Update addresses CVE-2025-22871 Resolves: RHEL-90050 - Bump revision - Go version update to v1.24.4 - Update addresses CVE-2025-4673 Resolves: RHEL-105058 - Version bump to 0.135.0 - Add systemd-journal group to Requires(pre) - Bump go-tpm-keyfiles Resolves: RHEL-119812 - Update Expr to v1.17.7 - Addresses CVE-2025-68156 Resolves: RHEL-136447 - Update Go to 1.25.5 - Addresses CVE-2025-61729 Resolves: RHEL-140554 - Update to v0.144.0 - Addresses CVE-2025-61726, CVE-2025-68121 Resolves: RHEL-148516 - Update to Go v1.26.2, go-jose v4.1.4, go-grcp v1.79.3 - Addresses CVE-2026-25679, CVE-2026-33186, CVE-2026-34986, CVE-2026-32282, CVE-2026-32283, CVE-2026-32280, CVE-2026-33810 Resolves: RHEL-158777, RHEL-160842, RHEL-165038, RHEL-166685, RHEL-167683, RHEL-167395, RHEL-166351 - Update to v0.152.1 - Addresses CVE-2026-39821, CVE-2026-42154, CVE-2026-33811, CVE-2026-42151, CVE-2026-27145, CVE-2026-25681, CVE-2026-27136 Resolves: RHEL-183842, RHEL-185027, RHEL-187332, RHEL-189294, RHEL-190006, RHEL-191128, RHEL-191580 - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Update OpenSSL certificates set up Resolves: RHEL-118292 - Update to openwsman-2.8.1 Resolves: RHEL-97643 - Add libwsman-client.so.4 for backward compatibility Related: RHEL-97643 - Support added for post-quantum cryptography Resolves: RHEL-127516 - Fix bogus 'sscg' arguments Related: RHEL-118292 - Update OpenSSL certificates set up Resolves: RHEL-118292 - Update to openwsman-2.8.1 Resolves: RHEL-97643 - Add libwsman-client.so.4 for backward compatibility Related: RHEL-97643 - Support added for post-quantum cryptography Resolves: RHEL-127516 - Fix bogus 'sscg' arguments Related: RHEL-118292 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable LTO for now - Re-enable LTO as upstream GCC target/96939 has been fixed - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add patch for CVE-2024-40897 - Resolves: RHEL-50700 - Bump version for upgrade with z-stream - Resolves: RHEL-50700 - Add patch for CVE-2024-40897 - Resolves: RHEL-50700 - Bump version for upgrade with z-stream - Resolves: RHEL-50700 - Add patch for CVE-2024-40897 - Resolves: RHEL-50700 - Bump version for upgrade with z-stream - Resolves: RHEL-50700 - Update to 3.38.1 - Update to 3.38.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Update to 40.rc - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 40.3 Resolves: #2089169 - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Update to 165.1 - go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the rhel-9 and rhel-10 rolling distribution repository configs - go.mod: update osbuild/images to 61b16700, enabling bootupd metadata generation for edge-commits including 9.6+ images - Test repository definitions are left at their upstream values - Add AlmaLinux repositories - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Fix problems with handling multi-datastream archives Resolves: rhbz#2129846 - Fix a crash when compulsively clicking in the GUI Resolves: rhbz#2127502 - Fix regression introduced when fixing content archive input Resolves: rhbz#2129008 - Fix a reaction to invalid content URI Resolves: rhbz#2148508 - Update translations Resolves: rhbz#2139667 Resolves: rhbz#2150877 - Update translations (rhbz#2189526) - Fix tar file extraction (rhbz#2218875) - Fix conflict of tftp package with "network servers" group (rhbz#2172264) - Fix checksums in FIPS mode (RHEL-40367) - Add missing chunk for PR_227 patch file (RHEL-40367) - Re-fix checksums in FIPS mode (RHEL-40367) - Fix Patch18 name (RHEL-40367) - Update to new release (v20240701) Resolves: rhbz#RHEL-52519 Resolves: rhbz#RHEL-38636 - Fix changelog Related: rhbz#RHEL-52519 - Add rhel 10.0 and rhel-10-unknown metadata Related: rhbz#RHEL-56790 - Update to new release (v20250124) Resolves: rhbz#RHEL-76320 - Update to new release (v20250606) Resolves: rhbz#RHEL-95251 - Add rhel-10.2 and rhel-9.8 prerelease Resolves: rhbz#RHEL-144809 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.0 release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.10.0 release Related: rhbz#2149601 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.8 Resolves: #RHEL-62769 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.9 Resolves: #RHEL-62769 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.1 Resolves: #RHEL-73827 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.2 Resolves: #RHEL-84765 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.4 Resolves: #RHEL-104888 - Backport https://github.com/ostreedev/ostree/pull/3493 Resolves: #RHEL-107855 - Update to 2025.5 - Update to 2025.6 Resolves: #RHEL-113644 - Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-131656 - Rebase to 2025.7 Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-129049 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.8 Resolves: #RHEL-62769 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2024.9 Resolves: #RHEL-62769 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.1 Resolves: #RHEL-73827 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.2 Resolves: #RHEL-84765 - Rebase to https://github.com/ostreedev/ostree/releases/tag/v2025.4 Resolves: #RHEL-104888 - Backport https://github.com/ostreedev/ostree/pull/3493 Resolves: #RHEL-107855 - Update to 2025.5 - Update to 2025.6 Resolves: #RHEL-113644 - Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-131656 - Rebase to 2025.7 Backport https://github.com/ostreedev/ostree/pull/3555 Resolves: #RHEL-129049 - update to 3.0.4 - fix incorrect fontconfig file (thanks to lazybvr) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1961999 - Add gating tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix regression in trust where file creation fails for long cert labels Resolves: RHEL-58899 - Fix usage message in p11-kit list-tokens command Resolves: RHEL-31810 - Update to new upstream release 0.25.10 Resolves: RHEL-115453 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 - Rebase to 0.26.2 Resolves: RHEL-147825 - Fix regression in trust where file creation fails for long cert labels Resolves: RHEL-58899 - Fix usage message in p11-kit list-tokens command Resolves: RHEL-31810 - Update to new upstream release 0.25.10 Resolves: RHEL-115453 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 - Rebase to 0.26.2 Resolves: RHEL-147825 - Fix regression in trust where file creation fails for long cert labels Resolves: RHEL-58899 - Fix usage message in p11-kit list-tokens command Resolves: RHEL-31810 - Update to new upstream release 0.25.10 Resolves: RHEL-115453 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 - Rebase to 0.26.2 Resolves: RHEL-147825 - Fix regression in trust where file creation fails for long cert labels Resolves: RHEL-58899 - Fix usage message in p11-kit list-tokens command Resolves: RHEL-31810 - Update to new upstream release 0.25.10 Resolves: RHEL-115453 - Rebase to 0.26.1 Resolves: RHEL-139075, RHEL-118361, RHEL-126132 - Rebase to 0.26.2 Resolves: RHEL-147825 - Rebase on upstream 2.1.7-rc4 release - Use systemd-sysusers to create user/group - Pacemaker Remote nodes can validate against later schema versions - Related: RHEL-17225 - Resolves: RHEL-7665 - Rebase on upstream 2.1.7 final release - Fix documentation for Pacemaker Remote schema transfers - Do not check CIB feature set version when CIB_file is set - Consolidate attrd cache handling - Avoid duplicating option metadata across daemons - Related: RHEL-7665 - Related: RHEL-13216 - Resolves: RHEL-7702 - Properly validate attribute set type in pacemaker-attrd - Fix `crm_attribute -t nodes --node localhost` - Resolves: RHEL-13216 - Resolves: RHEL-17225 - Resolves: RHEL-23498 - Fix upgrading to this package on multilib systems - Resolves: RHEL-28999 - Rebase on upstream 2.1.8-rc1 release - Fix a typo in the help output of pacemaker-fenced - Fix escaping characters in XML attribute output - Resolves: RHEL-25819 - Resolves: RHEL-30822 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Fix integer overflows in remote message decompression code (CVE-2026-10649) - Resolves: RHEL-181150 - Rebase on upstream 2.1.7-rc4 release - Use systemd-sysusers to create user/group - Pacemaker Remote nodes can validate against later schema versions - Related: RHEL-17225 - Resolves: RHEL-7665 - Rebase on upstream 2.1.7 final release - Fix documentation for Pacemaker Remote schema transfers - Do not check CIB feature set version when CIB_file is set - Consolidate attrd cache handling - Avoid duplicating option metadata across daemons - Related: RHEL-7665 - Related: RHEL-13216 - Resolves: RHEL-7702 - Properly validate attribute set type in pacemaker-attrd - Fix `crm_attribute -t nodes --node localhost` - Resolves: RHEL-13216 - Resolves: RHEL-17225 - Resolves: RHEL-23498 - Fix upgrading to this package on multilib systems - Resolves: RHEL-28999 - Rebase on upstream 2.1.8-rc1 release - Fix a typo in the help output of pacemaker-fenced - Fix escaping characters in XML attribute output - Resolves: RHEL-25819 - Resolves: RHEL-30822 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Fix integer overflows in remote message decompression code (CVE-2026-10649) - Resolves: RHEL-181150 - Rebase on upstream 2.1.7-rc4 release - Use systemd-sysusers to create user/group - Pacemaker Remote nodes can validate against later schema versions - Related: RHEL-17225 - Resolves: RHEL-7665 - Rebase on upstream 2.1.7 final release - Fix documentation for Pacemaker Remote schema transfers - Do not check CIB feature set version when CIB_file is set - Consolidate attrd cache handling - Avoid duplicating option metadata across daemons - Related: RHEL-7665 - Related: RHEL-13216 - Resolves: RHEL-7702 - Properly validate attribute set type in pacemaker-attrd - Fix `crm_attribute -t nodes --node localhost` - Resolves: RHEL-13216 - Resolves: RHEL-17225 - Resolves: RHEL-23498 - Fix upgrading to this package on multilib systems - Resolves: RHEL-28999 - Rebase on upstream 2.1.8-rc1 release - Fix a typo in the help output of pacemaker-fenced - Fix escaping characters in XML attribute output - Resolves: RHEL-25819 - Resolves: RHEL-30822 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Rebase on upstream 2.1.8-rc4 release - Add ability to immediately shutdown system with PCMK_panic_action= - Fix a memory leak in the attribute daemon - Add ability to list options and parameters as parseable metadata - crm_verify now reports invalid fence level indexes - Fix an error in node ID handling in `crm_node -i` - Fix regression in attrd_updater output - Resolves: RHEL-39057 - Resolves: RHEL-40117 - Resolves: RHEL-23401 - Resolves: RHEL-2996 - Resolves: RHEL-47249 - Resolves: RHEL-45935 - Rebase on upstream 2.1.8 final release - Resolves: RHEL-38540 - Rebase on upstream 2.1.9 final release - Use async communication to establish TLS connections - Fix regression in adding alerts to CIB - Fix a crash in command line tools when stderr is closed - Resolves: RHEL-61382 - Resolves: RHEL-34276 - Resolves: RHEL-55458 - Resolves: RHEL-59043 - Rebase on upstream 2.1.10-rc1 release - Use dbus to detect completion of systemd resource start/stop actions - Add an option for controlling remote node fencing behavior - Related: RHEL-89134 - Resolves: RHEL-86143 - Resolves: RHEL-84018 - Handle large timeouts correctly in crm_resource --wait - Do not try to connect to subdaemons before they're respawned - Don't evict IPC clients as long as they're still processing messages - Don't overwhelm the FSA queue with repeated CIB queries - Resolves: RHEL-45869 - Resolves: RHEL-87484 - Resolves: RHEL-114894 - Fix integer overflows in remote message decompression code (CVE-2026-10649) - Resolves: RHEL-181150 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upstream 5.0 Release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Upstream 5.0 Release - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upstream 5.0 Release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943 - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727 - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21244 - libpam: support long lines in service files. Resolves: RHEL-40705 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62879 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23631 and RHEL-39943 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66244 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973 - pam.conf: remove tallylog. Resolves: RHEL-15324 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96727 - pam_faillock: skip clearing user's failed attempt. Resolves: RHEL-130875 - pam_faillock: create tallydir before creating tallyfile. Resolves: RHEL-20943 - libpam: use getlogin() from libc and not utmp. Resolves: RHEL-16727 - pam_access: handle hostnames in access.conf. Resolves: RHEL-22300 - pam_namespace: protect_dir(): use O_DIRECTORY to prevent local DoS situations. CVE-2024-22365. Resolves: RHEL-21244 - libpam: support long lines in service files. Resolves: RHEL-40705 - pam_unix: always run the helper to obtain shadow password file entries. CVE-2024-10041. Resolves: RHEL-62879 - pam_access: always match local address and clarify LOCAL keyword behaviour. Resolves: RHEL-23631 and RHEL-39943 - pam_access: rework resolving of tokens as hostname. Resolves: CVE-2024-10963 and RHEL-66244 - pam_unix: sync expiry checks with shadow. Resolves: RHEL-70519, RHEL-95475, RHEL-96955 and RHEL-96973 - pam.conf: remove tallylog. Resolves: RHEL-15324 - pam_namespace: fix potential privilege escalation. Resolves: CVE-2025-6020 and RHEL-96727 - pam_faillock: skip clearing user's failed attempt. Resolves: RHEL-130875 - cifs.upcall: fix UAF in get_cachename_from_process_env() - Resolves: RHEL-28047 - pam_cifscreds: fix NULL arg warning passed to pam_syslog() - Resolves: RHEL-28050 - mount.cifs.rst: add missing reference for sssd - mount.cifs.rst: update section about xattr/acl support - Resolves: RHEL-22495 - Implement CLDAP Ping to find the closest site - Resolves: RHELPLAN-17597 - resolves: RHEL-61732 - Update to version 7.1 - Fix damaged test filename - resolves: RHEL-82680 - Update to version 7.2 - resolves: RHEL-131406 - fix regression with cifscreds(1) - resolves: RHEL-146305 - Enable debug logs in cifs.upcall - resolves: RHEL-61732 - Update to version 7.1 - Fix damaged test filename - resolves: RHEL-82680 - Update to version 7.2 - resolves: RHEL-110765 - fix regression with cifscreds(1) - resolves: RHEL-127499 - Enable debug logs in cifs.upcall - Update to version 7.6 - resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego - resolves: RHEL-192982 - fix krb5 mount regression - Fix missing error codes set and invalid error code checks in OpenSSH. It prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS is on (CVE-2025-26465). Resolves: RHEL-78700 - Move the redhat help message to debug1 log level Resolves: RHEL-104580 - Rebase to version 9.9 Resolves: RHEL-108912 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-119515 - Canonicalize username when matching a user Resolves: RHEL-118372 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Version bump - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - Unpatch Red Hat help message - Rebase to version 9.9 Resolves: RHEL-108912 - Fix implicit destination path selection when source path ends with ".." Resolves: RHEL-119515 - Canonicalize username when matching a user Resolves: RHEL-118372 - Enable support for DSA keys Resolves: RHEL-127624 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-133959 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-133960 - Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode Resolves: RHEL-151580 - CVE-2026-3497: Fix information disclosure or denial of service due to uninitialized variables in gssapi-keyex Resolves: RHEL-155824 - Version bump - CVE-2026-35385: Fix privilege escalation via scp legacy protocol when not in preserving file mode Resolves: RHEL-164753 - CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode multiplexing sessions Resolves: RHEL-166250 - CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms and HostbasedAcceptedAlgorithms with regard to ECDSA keys Resolves: RHEL-166234 - CVE-2026-35414: Fix mishandling of authorized_keys principals option Resolves: RHEL-166202 - CVE-2026-35386: Add validation rules to usernames and hostnames set for ProxyJump/-J on the commandline Resolves: RHEL-166218 - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation that leads to client-side denial of service Resolves: RHEL-186439 - CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator cleanup due to missing NULL terminator Resolves: RHEL-185836 - CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket pre-binding Resolves: RHEL-185854 - CVE-2026-59996: Fix remote glob result of ".." causing files to be placed in unintended parent directories when scp performs remote-to-remote copy via the local host Resolves: RHEL-193178 - CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange Resolves: RHEL-193024 - Unpatch Red Hat help message - Update to 1.48.0 - Update to 1.48.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.48.2 - Update to 1.48.3 - Disable gtk-doc support as we don't have gi-docgen in Fedora yet - Update to 1.48.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.48.7 (#1981720) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update pango-emoji-table.h for emoji 14 support - Add pango-update-emoji.patch - Resolves: #2119674 - Update to 1.48.0 - Update to 1.48.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.48.2 - Update to 1.48.3 - Disable gtk-doc support as we don't have gi-docgen in Fedora yet - Update to 1.48.4 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.48.7 (#1981720) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update pango-emoji-table.h for emoji 14 support - Add pango-update-emoji.patch - Resolves: #2119674 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.42.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.42.2 - Update source URLs - Switch to meson build system - Tighten soname globs - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use pkgconfig to BR the required cairomm API/ABI version 1.0 (vs. 1.16); use cairomm1.0, which may be a virtual Provides, in the manual lib Requires - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.46.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release. Resolves: rhbz#1254352 - Sub-package texttopaps with old code. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-79787 - Resolves: RHEL-84283 - Resolves: RHEL-84283 - Resolves: RHEL-106326 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-134119 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-84283 - Resolves: RHEL-84283 - Resolves: RHEL-106326 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-134119 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-84283 - Resolves: RHEL-106326 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-134119 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-216654 - Resolves: RHEL-79787 - Resolves: RHEL-84283 - Resolves: RHEL-84283 - Resolves: RHEL-106326 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-134119 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-84283 - Resolves: RHEL-84283 - Resolves: RHEL-106326 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-134119 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-84283 - Resolves: RHEL-106326 - Resolves: RHEL-123376 RHEL-123438 - Resolves: RHEL-134119 - Resolves: RHEL-134942 RHEL-134943 - Resolves: RHEL-136313 RHEL-136461 RHEL-137439 RHEL-137588 - Resolves: RHEL-137588 RHEL-136313 - Resolves: RHEL-169637 RHEL-169639 RHEL-169648 - Resolves: RHEL-184106 RHEL-183990 - Resolves: RHEL-216654 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 0.4.0. - 0.4.2. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix build - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 1.1.13 + spec cleanup and modernization fixes rhbz#1297158 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - add PCIe 6.0 data rate (64 GT/s) support (#RHEL-61959) - add support for cxl1.1 device link status information (#RHEL-29162) - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix the SAST reports described in RHEL-32492 and RHEL-32488 - Fix the SAST reports described in RHEL-32492 and RHEL-32488 - Fix the SAST reports described in RHEL-32492 and RHEL-32488 - Fix the SAST reports described in RHEL-32492 and RHEL-32488 - Fix issue in the backtracking optimization of character in JIT - Fix an issue with restoring originally unset entries in recursion - Resolves: BZ#2248133 - Rebuilt for added pcre2-tools into CRB - Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64 - Resolves: RHEL-51866 - Fix issue in the backtracking optimization of character in JIT - Fix an issue with restoring originally unset entries in recursion - Resolves: BZ#2248133 - Rebuilt for added pcre2-tools into CRB - Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64 - Resolves: RHEL-51866 - Fix issue in the backtracking optimization of character in JIT - Fix an issue with restoring originally unset entries in recursion - Resolves: BZ#2248133 - Rebuilt for added pcre2-tools into CRB - Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64 - Resolves: RHEL-51866 - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.200 - New release with no new features, just preparing for a series of bugfix releases - Specify all build dependencies - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Update to 1.201 - Speed up LCS when $keyGen is undef (CPAN RT#101105) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Patch the code to use https instead of http (CVE-2024-45321) - Resolves: RHEL-56520 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 2.36 bump - Do not require non-core IO::Compress::Xz and IO::Uncompress::UnXz modules on bootstrapping - Increase release to favour standalone package - 2.38 bump - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Resolves: RHEL-181662 - Fix CVE-2026-42496: validate symlink and hardlink targets in secure extract mode - Resolves: RHEL-181662 - Fix CVE-2026-9538: add $MAX_FILE_SIZE cap for tar entry size during read to prevent memory allocation DoS - Resolves: RHEL-191917 - 1.65 bump - 1.66 bump - 1.67 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 1.68 bump - Use make_* macros - Perl 5.32 rebuild - Remove an unused build-time dependency on Test::MockModule - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Specify all dependencies - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build macro - Correct a spelling - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 4.49 bump - 4.50 bump - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 4.51 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Package tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#2218907 - Fix CVE-2023-31484 - Resolves: RHEL-77187 - Fix permission for creating site directories - Resolves: RHEL-77187 - Update man page - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Spec clean-up - Use author-independent source URL - Specify all build dependencies - Use %{make_build} and %{make_install} - Fix permissions of installed files - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 6.08 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.44 - Support Perls with COW disabled - Bump B::COW requirement for testing - Disable tests until B::COW is packaged - Update to 0.45 - Bump B::COW requirement to fix big-endian issue - Re-enable tests - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - NO_PERLLOCAL=1 needs a recent ExtUtils::MakeMaker - 2.27 bump - A dummy release to overcome a Koji failure - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - 2.28 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.095 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.096 bump - 2.100 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.101 bump - Package tests - Fix dependencies for ELN - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Perl 5.32 rebuild - Update to 2.094 - Fix issue with Append mode and SvOOK (GH#4) - Update to 2.095 (no changes) - Modernize spec using %{make_build} and %{make_install} - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.096 (no changes) - Update to 2.100 - Expose liblzma's 'preset_dict' feature - Trim whitespace - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.101 (no changes) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.095 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.096 bump - 2.100 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.101 bump - Package tests - Fix dependencies for ELN - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Indeed upgrade to 0.32 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.33 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Modernize spec file - Package upstream tests - Quote a substituted number of processors in the test script - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix unsafe decoding in indef case (CVE-2013-7488) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build macro - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New version 0.33 supporting passphrase protected keys Resolves: RHEL-38780 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build macro - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly for shared mailboxes - cyrus-imapd.spec: rename patches to correspond with others - Update to 3.4.8, fixing CVE-2024-34055 - tls: enable automatic DH parameter selection Resolves: RHEL-70762 - Remove sscg option --package from cyrus-imapd-init.service Resolves: RHEL-132242 - Create directory structure under /var using tmpfiles.d Resolves: RHEL-129881 - Resolves: RHEL-85011 - Resolves: RHEL-53861, RHEL-77083 - Update check for SSL connection - Enable testing - Resolves: RHEL-123525 - Fix MYSQL OPT_RECONNECT warning - Resolves: RHEL-53861, RHEL-77083 - Update check for SSL connection - Enable testing - Resolves: RHEL-123525 - Fix MYSQL OPT_RECONNECT warning - Resolves: RHEL-132443 - Skip the ssl tests if MySQL does not provide have_ssl - 3.12.3 bump - 3.13.0 bump - Perl 5.32 rebuild - 3.14.0 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.14.2 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initialize filename variable in sqlite_db_filename() - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.66 bump - Update DBD-SQLite-1.60-Unbundle-Test-NoWarnings.patch - Do not build-require unused Test::FailWarnings - Update the description - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - 1.643 bump - Build-require blib for tests - Add BR: perl(FileHandle) - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix possible stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) - Resolves: RHEL-184984 - Fix possible stack overflow and buffer overflow in DBI.xs (CVE-2026-9698) - Resolves: RHEL-184984 - Set a hard limit of 99999 on '?' placeholders (CVE-2026-14739) - Resolves: RHEL-193306 - Fix unsafe string eval in DBI::Profile (CVE-2026-14380) - Resolves: RHEL-211149 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 1.853 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.854 bump - 1.855 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make_build macro - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Modernize the spec file - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix a memory leak when a magic throws an exception - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1827253 - Rebase to upstream version 6.81. - 1842524 - Rebase to upstream version 6.82. - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1902872 - Rebase to upstream version 6.83. - Specify all dependendencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1933868 - Rebase to upstream version 6.85. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2026-60075: prevent ReDoS via long whitespace runs in date/time parsing Related: RHEL-239797 - 3.58 bump - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.59 bump - 3.60 bump - 3.62 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.19 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Modernize a spec file - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Correct a license tag to "(GPL+ or Artistic) and RSA" - 2.58 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 3.04 bump - 3.05 bump - 3.06 bump - Increase release to favour standalone package - 3.07 bump - 3.08 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1984005, CVE-2021-36770 - mitigate @INC pollution when loading ConfigLocal - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 3.04 bump - 3.05 bump - 3.06 bump - Increase release to favour standalone package - 3.07 bump - 3.08 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1984005, CVE-2021-36770 - mitigate @INC pollution when loading ConfigLocal - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Update to 0.17028 - Moved the VCS repo to https://github.com/shlomif/perl-error.pm - Update to 0.17029 - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD documentation (VERSION used to appear before NAME) - BR: perl(blib) for t/00-compile.t - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.74 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.002002 - Fix bug in handling regexps in import lists; Exporter::Tiny allowed regexps like /foo/i but not /foo/; having trailing flags is now optional! (GH#6) - Tests would fail if 'PERL5OPT=-Mfeature=:5.18' environment variable was set; this is because bareword '-default' was being interpreted as the Perl 'default' keyword (GH#5) - Unbundle newly-bundled test modules - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-131157 - Update tests for Image Mode - 7.48 bump - 7.50 bump - 7.52 bump - 7.54 bump - 7.56 bump - 7.58 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 7.60 bump - Package tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - 2.16 bump - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.18 bump - 2.20 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 7.48 bump - 7.50 bump - 7.52 bump - 7.54 bump - 7.56 bump - 7.58 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 7.60 bump - Package tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 7.48 bump - 7.50 bump - 7.52 bump - 7.54 bump - 7.56 bump - 7.58 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 7.60 bump - Package tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.73 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2025-40907 (integer overflow when parsing FastCGI parameters) - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.00 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 1.006 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 6.07 bump - 6.11 bump - 6.14 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - 2.17 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.18 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.118 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 9999.28. - Update to 9999.29. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 9999.30. - Perl 5.32 rebuild - Update to 9999.32. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.2310 bump - 0.2311 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Build-require Perl debugger for the tests - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.60 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upgrade to 0.96 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1994263 - Fix comparison of OID structure - Resolves: rhbz#1994263 - Fix a crash in gss_release_oid() when destructing out_mech - 2.51 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.52 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Update to 2.43.5 - Resolves: RHEL-36353, RHEL-36357, RHEL-36371, RHEL-36383, RHEL-36387 - update to 2.47.1 - Resolves: RHEL-63964 - add the option to sanitize sideband channel messages - Resolves: RHEL-84513 - update to 2.47.3 - Resolves: RHEL-102449, RHEL-102463, RHEL-102675, RHEL-102681 - update to 2.52.0 - Resolves: RHEL-118147 - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.73 bump - 3.75 bump - Always build-require HTTP::Headers - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 3.76 bump - Package tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 6.07 bump - 6.08 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 6.09 bump - 6.10 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 6.03 bump - 6.04 bump - 6.05 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Perl 5.32 re-rebuild - Perl 5.32 re-rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 6.26 bump - 6.27 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 6.28 bump - Package tests - 6.29 bump - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Changes the verify_SSL default parameter from 0 to 1 - CVE-2023-31486 - Resolves: rhbz#2228412 - Update man page for CVE-2023-31486 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 2.095 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.096 bump - 2.100 bump - Use %{make_build} and %{make_install} - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 2.101 bump - 2.102 bump - Package tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2026-48962: remove use of eval in File::GlobMapper - Resolves: RHEL-180418 - Update to 2.094 (no changes) - Update to 2.095 (no changes) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.096 - Add test for Zip with XZ compression - Update to 2.100 - Trim whitespace - Avoid indirect calls - Fix typo - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.101 (no changes) - Disable optional tests on ELN - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.004 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Specify all build dependencies - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Specify all build dependencies - Simplify find command using -delete - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.41 bump - Create Makefile.PL, use ExtUtils::MakeMaker instead of Module::Build - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-40746 - Fixed test fail with OpenSSL 3.2 - Specfile autogenerated by cpanspec 1.78. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Modernize the spec file - Increase release to favour standalone package - 2.08 bump - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.09 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.26 - BUILD: Update FAIL_POSIX warning message (GH#28) - TEST: t/07_taint.t: Use executable name as source of taintedness (GH#21) - OTHER: Typographic corrections (CPAN RT#60211, CPAN RT#86403) - Add Travis configuration - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.29 - Improved handling of shell commands on Windows, which should get us closer to resolving Win32-related issues; there should be no change of functionality on Unix-like platforms - Better workaround for bug in perl-5.8.9 (GH#23) - Add t/args.t - Modify t/win32.t - Added Travis and AppVeyor configuration files - Eliminated use of Dist::Zilla for build, using older, but more reliable and better understood (by maintainer) ExtUtils::MakeMaker-based configuration - Move author testing to xt/ directory - Update to 1.30 - On MSWin32, make Win32::Process a prerequisite - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.026 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Specify all dependencies - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 4.03 - Use %{make_install} instead of "make pure_install" - Use %{make_build} instead of make - Replace calls to %{__perl} with /usr/bin/perl - Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Package tests manually - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Update to 4.05 - No code changes - Modify tests for Perl 7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 4.06 - Fix return values of boolean_values for compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Package tests - Fix tests subpackage test script - Fix a shell bang in a certificate generator script - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.68 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix resolving localhost on loopback-only machines (https://github.com/perl-ldap/perl-ldap/pull/60) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Disable tests that need the Internet by default - Perl 5.32 rebuild - 6.09 bump - Remove unused build-time dependencies - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 6.10 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.430 - Fix failing installation in parallel make (GH#38) - Infrastructure improvements and tooling updates, lots of author tests with corresponding fixes added - Added slide and slideatatime functions - Documentation fixes (GH#21, GH#33, GH#34, CPAN RT#126029, CPAN RT#132043, CPAN RT#132940) - Bump List::MoreUtils::XS requirement to 0.430 - Use author-independent source URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.430 - Fix parts of CPAN RT#123989: more $a/$b/$_ refcounting bugs - Since some bugs are simply reported wrong, dealing with them breaks more (including running code) than it solves - way too heavy to feel better... - Introduce functions slide and slideatatime - Toolchain fixes - Fix LANG=nb_NO.utf8 related str tests fails (CPAN RT#133128) - Fix typo (GH#7) - Fix parts of CPAN RT#132043: listcmp misbehave in XS implementation - Use author-independent source URL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Do not run optional test on RHEL (bug #1947387) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.16 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.20200108 (RHBZ#1789387). - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.20200331.1 (RHBZ#1825822) - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.20200824.1 (RHBZ#1871904) - Update to 2.20210112 (RHBZ#1915573) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.20200513.1 - Tage LICENSE as %license - Perl 5.32 rebuild - Update to 1.20200708 - Update to 1.20200724 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.20200824 - Update to 1.20200907 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1.999817 bump - 1.999818 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 0.5009 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 0.4231 bump - BR: perl(blib), needed for t/xs.t - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable optional tests on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-5539 - 5.20240609 bump - Resolves: RHEL-5539 - 5.20240609 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.36 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.70 - Protect ourselves from Module::Metadata parsing problems (CPAN RT#130939) - Use author-independent source URL - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - 0.72 bump - Perl 5.32 re-rebuild updated packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.74 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Update to 1.000037 - Add decode_pod option for automatic =encoding handling - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Update to 0.86 - Update PAUSE and ANDK keys to 2020 - Update documentation pertaining to SHA1 - Fix compatibility with Crypt::OpenPGP - Use mktemp to create temporary GPG directory - Perl 5.32 re-rebuild updated packages - Update to 0.87 - Skip 3-verify.t on Crypt::OpenPGP installations - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Perl 5.34 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 0.88 - Update PAUSE keys to 2022 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 20200520 bump - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Specify all dependencies - Modernize spec file - Remove useless shebangs from the module files (CPAN RT#132167) - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Spec tidy-up - Use author-independent source URL - Use %{make_build} and %{make_install} - Fix permissions verbosely - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version 0.22- fix for incorrect ip address handling - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop erroneous UTF-8 encoding conversion of Changes file (#1869049) - 1.28 bump - 1.29 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Related: rhbz#2126689 - Resolves: rhbz#2126689 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 6.20 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 6.21 bump - Package tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Specfile autogenerated by cpanspec 1.78. - Disable network tests in 200_tcp_ping - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-40758 - Update to 1.94 - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and 3.2, and LibreSSL 3.5-3.8 - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to compile, it should now be much easier to identify the cause - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl() function are now exposed, enabling fine-grained control over the initialisation and configuration of both libraries - libssl functions implementing TLS 1.3 PSK authentication are now exposed, in particular SSL_CTX_set_psk_find_session_callback() (on the server side) and SSL_CTX_set_psk_use_session_callback() (on the client side) - libssl functions implementing server-side TLS 1.2 PSK authentication are now exposed, in particular SSL_CTX_set_psk_server_callback() - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a TLS server to set a callback function that is executed when the server processes a ClientHello message - Many more libcrypto/libssl constants and functions are now exposed; see the release notes for the 1.93 developer releases for a full list - Package tests - Fix test suite to work with OpenSSL 3.4.0 and newer Resolves: RHEL-92846 - Resolves: RHEL-92846 - Fix typo in macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable optional run-requires for build - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Specfile autogenerated by cpanspec 1.78. - 0.009 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Specify all build requirements - Drop support for building with Test::More < 0.88 - Drop redundant buildroot cleaning in %install section - Simplify find command using -delete - Fix permissions verbosely - Use %license macro - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Spec tidy-up - Use author-independent source URL - Specify all build dependencies - Simplify find command using -delete - Fix permissions verbosely - Make %files list more explicit - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upstream update. - Reflect Source0:-URL having changed. - Rework BRs. - Filter out redundant unversioned R:perl(XSLoader). - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 0.42 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.43 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix an off-by-one in bsd_realpath() - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.09 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.74 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fix searching for builtins in perlop POD (bug #1739463) - Build-require blib module for tests (bug #1739463) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Specify all dependencies - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 3.40 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 3.41 - I left release at the artificially high value in case it was needed - 3.42 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 1.70 bump - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.01 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fix implied indenting in XS - Resolves: RHEL-28962 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - 2.030 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.031 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1 - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix a buffer overflow when processing a vstring longer than 2^31-1 (Perl GH#17306) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upgrade to 3.21 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - BR: perl(blib) for t/00-compile.t - Use author-independent source URL - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 0.36 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1 - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.00 bump - 5.01 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 0.014 bump - 0.015 bump - Unbundle Object::HashBase - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.302177 - Minor fix to author downstream test - No significant changes since the last trial - Fix Test::More's $TODO inside intercept (#862) - Update to 1.302180 - Move try_sig_mask to the only module that uses it - Inherit warnings bitmask in cmp_ok string eval - Update copyright date - Improved API for intercept {} and what it returns - Bump minimum List::Util version (for uniq) - Update to 1.302181 - Put try_sig_mask back where it goes (and add test to prevent this in the future) - Drop new List::Util requirement back down - Update to 1.302182 - Fix 5.6 support - Fix fragile %INC handling in a test - Demote Module::Pluggable hard dependency to Suggests level - Update to 1.302183 - Avoid closing over scalar in BEGIN block in cmp_ok eval - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.04 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, and aarch64 flags Relates: rhbz#1991688 - update to 1.57 - update to 1.58 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - update to 1.59 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upgrade to 3.14 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Specfile autogenerated by cpanspec 1.78. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upgrade to 1.9764 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use an upstream release - Introduce an epoch not to regress comparing to RHEL (bug #1895852) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1.30 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Adjust tests to pass 4-digit years to Time::Local (CPAN RT#124509) - Modernize a spec file - 2.31 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 2.32 bump - 2.33 bump - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable building with FreeType support - Package tests - Resolves: RHEL-25202 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Perl 5.32 re-rebuild of bootstrapped packages - Modernize a spec file - 5.05 bump - 5.06 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.07 bump - 5.08 bump - 5.09 bump - Package tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1.28 bump - 1.29 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Specify all dependencies - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upgrade to 1.27 as provided in perl-5.32.0 - Modernize a spec file - Apply a forgotten Unicode-Normalize-1.25-Upgrade-to-1.27.patch patch - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build, make_install macros, and use NO_PACKLIST=1 - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Modernize a spec file - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.0203 bump - 2.0204 bump - 2.0205 bump - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.0206 bump - Replace using of Alien::Libxml2 with pkg-config - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix out-of-bounds UTF-8 heap read in node name validation (CVE-2026-8177) - Resolves: RHEL-186532 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2006-10002, CVE-2006-10003 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1989824 - Enable gating - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Do not run optional test on RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.30 - Breaking Change: Set $YAML::LoadBlessed default to false to make it more secure - Remove non-free test file t/load-slides.t (#1813197, GH#219) - Perl 5.32 rebuild - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.32 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.33 bump - 2.34 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 3.04 bump - 3.05 bump - 3.06 bump - Increase release to favour standalone package - 3.07 bump - 3.08 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: rhbz#1984005, CVE-2021-36770 - mitigate @INC pollution when loading ConfigLocal - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - 0.021 bump - 0.022 bump - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Resolves: RHEL-5537 - 1.13 bump - Package tests - Rebase to Fedora Rawhide resolves: RHEL-56803 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.32 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 3.12 bump - 3.13 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 6.48 bump - 6.49 bump - 6.50 bump - 6.51 bump - 6.52 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 6.53 bump - Package tests - Package talk-to-ourself script with the tests - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.238 - Move the prerequisite Test::More from being a runtime prerequisite to a test time / build time prerequisite (GH#11) - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-5538 - 5.20210520 bump - Package tests - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - 4.13 bump - 4.14 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Increase release to favour standalone package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Perl 5.32 rebuild - Disable perl_bootstrap for perl 5.32 rebuild - Disable perl_bootstrap for perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Specify all dependencies - Upgrade to 2.25 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Upgrade to 1.61 as provided in perl-5.32.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Spec file cleanups: Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMake - Increase release to favour standalone package - Perl 5.32 re-rebuild of bootstrapped packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.9927 bump - 0.9928 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixes: CVE-2023-47038 - Fixes: CVE-2025-40909 - Clone dirhandles without fchdir - Initial packaging - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebase to upstream release 1.4.6 - Build jit based on what postgresql server does Related: #1933048 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 1.4.8 - Postgresql 15 is supported - Related: #2128410 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47350 - Resolves: RHEL-3636 - Initial import for PG 16 module - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 - Update to v1.5.1 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 - Update to v1.5.1 - Update to 1.5.3 - Initial import for postgresql18 - Rebuild for PostgreSQL 12 - Update to 1.4.0 for PostgreSQL 12 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.5.0 for PostgreSQL 13 support - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove llvmjit parts Resolves: #1951268 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial import for postgresql 15 module - Update to 1.7.0 - Support postgresql 15 - Related: #2128410 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 - Update to 18.0 - Initial import for postgresql18 - Initial packaging - Enable Portable build - Resolves: RHEL-84405 - Initial packaging - Enable Portable build - Resolves: RHEL-84405 - Update to 0.8.1 - Initial import for postgresql18 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - update PEAR to 1.10.13 #2032448 - update Archive_Tar to 1.4.14 - update PEAR to 1.10.14 RHEL-17392 - update to 5.1.18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.20 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.20 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.18 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.20 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 5.1.19 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 5.1.20 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 5.1.21 for PHP 8.1 #2070040 - update to 5.1.23 for PHP 8.2 RHEL-14699 - update to 6.0.0 - cleanup SCL stuff for Fedora review - update to 6.0.1 - update to 6.0.2 - use valkey on Fedora 41 - add upstream patch for PHP 8.4 - cleanup and modernize spec file - update to 6.1.0RC2 - fix test suite with redis 6.2 using patch from https://github.com/phpredis/phpredis/pull/2555 - update to 6.1.0 - drop patch merged upstream - RHEL build - ignore 1 ONLINE test - use valkey on Fedora 41 - add upstream patch for PHP 8.4 - cleanup and modernize spec file - update to 6.1.0RC2 - fix test suite with redis 6.2 using patch from https://github.com/phpredis/phpredis/pull/2555 - update to 6.1.0 - drop patch merged upstream - RHEL build - ignore 1 ONLINE test - use valkey for tests - rebuild for https://fedoraproject.org/wiki/Changes/php74 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 2.0.2 - update to 2.0.3 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 2.0.2 - update to 2.0.3 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - build for PHP 8.1 #2070040 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 2.0.2 - update to 2.0.3 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - build for PHP 8.1 #2070040 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 2.0.2 - update to 2.0.3 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - build for PHP 8.1 #2070040 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 2.0.2 - update to 2.0.3 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - build for PHP 8.1 #2070040 - update to 3.0.1 - update to 3.0.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 3.0.3 - rebuild for https://fedoraproject.org/wiki/Changes/php80 - update to 3.0.4 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - ignore tests relying on DNS #1979841 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 3.1.2 rhbz#2030322 - update to 3.0.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 3.0.3 - rebuild for https://fedoraproject.org/wiki/Changes/php80 - update to 3.0.4 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - ignore tests relying on DNS #1979841 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 3.1.2 rhbz#2030322 - update to 3.1.4 for PHP 8.1 #2070040 - update to 3.1.2 rhbz#2030322 - update to 3.1.4 for PHP 8.1 #2070040 - update to 3.2.2 for PHP 8.2 RHEL-14699 - drop inet_ntoa usage using upstream patch - update to 3.2.2 for PHP 8.2 RHEL-14699 - drop inet_ntoa usage using upstream patch - update to 3.3.1 for PHP 8.3 - update to 3.2.2 for PHP 8.2 RHEL-14699 - drop inet_ntoa usage using upstream patch - update to 3.3.1 for PHP 8.3 - update to 1.18.2 - update to 1.19.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 1.19.1 - update to 1.19.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 1.19.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 1.19.1 - update to 1.19.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for PHP 8. Related rhbz#1949319 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to 1.20.1 for PHP 8.1 #2070040 - update to 1.20.1 for PHP 8.1 #2070040 - update to 1.22.3 for PHP 8.2 RHEL-14699 - update to 1.20.1 for PHP 8.1 #2070040 - update to 1.22.3 for PHP 8.2 RHEL-14699 - update to 1.20.1 for PHP 8.1 #2070040 - update to 1.22.3 for PHP 8.2 RHEL-14699 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix Leak partial content of the heap through heap buffer over-read CVE-2024-8929 - Fix Configuring a proxy in a stream context might allow for CRLF injection in URIs CVE-2024-11234 - Fix Single byte overread with convert.quoted-printable-decode filter CVE-2024-11233 - Fix cgi.force_redirect configuration is bypassable due to the environment variable collision CVE-2024-8927 - Fix Logs from childrens may be altered CVE-2024-9026 - Fix Erroneous parsing of multipart form data CVE-2024-8925 - Fix filter bypass in filter_var FILTER_VALIDATE_URL CVE-2024-5458 - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix CVE-2024-2756 - Fix password_verify can erroneously return true opening ATO risk CVE-2024-3096 - Fix libxml streams use wrong `content-type` header when requesting a redirected resource CVE-2025-1219 - Fix Stream HTTP wrapper header check might omit basic auth header CVE-2025-1736 - Fix Stream HTTP wrapper truncate redirect location to 1024 bytes CVE-2025-1861 - Fix Streams HTTP wrapper does not fail for headers without colon CVE-2025-1734 - Fix Header parser of `http` stream wrapper does not handle folded headers CVE-2025-1217 - Fix pgsql extension does not check for errors during escaping CVE-2025-1735 - Fix NULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix CVE-2025-6491 - Fix Null byte termination in hostnames CVE-2025-1220 - Fix soap memory corruption - Fix ldap_set_option() not applied on different ldap connections - Fix Null byte termination in dns_get_record() GHSA-www2-q4fc-65wf - Fix Heap buffer overflow in array_merge() CVE-2025-14178 - Fix Information Leak of Memory in getimagesize CVE-2025-14177 - Fix XSS within status endpoint CVE-2026-6735 - Fix Null pointer dereference in php_mb_check_encoding() via mb_ereg_search_init() CVE-2026-7259 - Fix Stale SOAP_GLOBAL(ref_map) pointer with Apache Map CVE-2026-6722 - Fix Use-after-free after header parsing failure with SOAP_PERSISTENCE_SESSION CVE-2026-7261 - Fix Broken Apache map value NULL check CVE-2026-7262 - Fix Signed integer overflow of char array offset CVE-2026-7568 - Fix Consistently pass unsigned char to ctype.h functions CVE-2026-7258 - rebase to 8.1.27 RHEL-19093 - rebase to 8.1.30 RHEL-64144 - rebase to 8.1.32 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.25 RHEL-65837 - rebase to 8.2.28 - rebase to 8.2.30 - rebase to 8.2.31 - rebase to 8.2.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - rebase to 8.3.12 RHEL-62189 - enable command history in phpdbg - backport Argon2 password hashing in OpenSSL ext - build sockets extension statically - switch to nikic/php-parser version 5 - openssl: always warn about missing curve_name - rebase to 8.3.15 - rebase to 8.3.19 - rebase to 8.3.26 - rebase to 8.3.29 - rebase to 8.3.31 - drop capstone dependency on i686 - rebase to 8.3.32 - rebase to 8.3.33 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - enable pinentry-tty - New upstream release (#1919127) - Move pinentry-tty to separate subpackage (#1782442) - Update the wrapper selecting the appropriate version (#1918969) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix issues reported by coverity - Address few more minor issues reported by coverity - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Honor the disabled rpath - Sync final version of coverity patches from upstream (#1938729) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - enable pinentry-tty - New upstream release (#1919127) - Move pinentry-tty to separate subpackage (#1782442) - Update the wrapper selecting the appropriate version (#1918969) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix issues reported by coverity - Address few more minor issues reported by coverity - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Honor the disabled rpath - Sync final version of coverity patches from upstream (#1938729) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - enable pinentry-tty - New upstream release (#1919127) - Move pinentry-tty to separate subpackage (#1782442) - Update the wrapper selecting the appropriate version (#1918969) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix issues reported by coverity - Address few more minor issues reported by coverity - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Honor the disabled rpath - Sync final version of coverity patches from upstream (#1938729) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed FTBFS - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Update to version 1.0.0 - Add patch to avoid crash in deviceprovider. - Resolves: RHEL-17641 - Fix install conflict with older versions. - Resolves: RHEL-17641 - Update to version 1.0.1 - Add patch to revert timestamps - Resolves: RHEL-17641, RHEL-21900 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.0.7 - Rebase to 1.4.6 Resolves: DESKTOP-2312 - Rebase to 1.4.9 Resolves: RHEL-123614 - Rebase to 1.4.11 - Add fixes for CVE-2026-5674 Resolves: RHEL-164830 - Backport fix for CVE-2022-44638 - Backport fix for CVE-2022-44638 - Update to version 2.19.1 - Resolves: RHEL-100233 - Update to version 2.19.1 - Resolves: RHEL-100233 - Update to version 2.21 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-103636 - Update to version 2.19.1 - Resolves: RHEL-103636 - Update to version 2.21.4 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-100233 - Update to version 2.19.1 - Resolves: RHEL-100233 - Update to version 2.21.4 - Resolves: RHEL-188300 - Update to version 2.19.1 - Resolves: RHEL-100239 - Update to version 2.19.1 - Resolves: RHEL-100239 - Update to version 2.21.4 - Resolves: RHEL-190937 - Update to version 2.19.1 - Resolves: RHEL-100239 - Update to version 2.19.1 - Resolves: RHEL-100239 - Update to version 2.21.4 - Resolves: RHEL-190937 - Update to version 2.19.1 - Resolves: RHEL-100245 - Update to version 2.19.1 - Resolves: RHEL-100245 - Update to version 2.21.4 - Resolves: RHEL-190947 - Resolves: RHEL-60105 pki-servlet-engine: Denial of service in tomcat (CVE-2024-38286) - Resolves: RHEL-71715 pki-servlet-engine: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-124509 pki-servlet-engine: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-91744 pki-servlet-engine: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-60105 pki-servlet-engine: Denial of service in tomcat (CVE-2024-38286) - Resolves: RHEL-71715 pki-servlet-engine: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-124509 pki-servlet-engine: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-91744 pki-servlet-engine: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Use implicit maven toolchains - Rebuild - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update Java source/target to 1.8 - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Rebuilt for java-17-openjdk as system jdk - Update to upstream version 2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuilt for java-17-openjdk as system jdk - Add missing test dependency on JUnit 4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Update to upstream version 2.7.0 - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 2.8.0 - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Update to upstream version 2.1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Use implicit maven toolchains - Rebuild - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 2.2.0 - Drop obsolete plexus-containers-container-default - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Rebuilt for java-17-openjdk as system jdk - Add missing test dependency on JUnit 4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Use implicit maven toolchains - Rebuild - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to upstream version 1.27 - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Build with default JDK 17 - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Update to upstream version 3.5.1 - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Update to upstream version 3.5.1 - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update javapackages test plan to f42 - Fix CVE-2025-67030: Directory Traversal in Expand.extractFile - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Ship plymouth-devel in AppStream Resolves: RHEL-120220 - Add in the symlink for fedora-gdm-logo.png to watermark.png in the spinner theme directory to ensure the AlmaLinux watermark is displayed in plymouth. - Fix CVE-2023-41915 - Resolves: RHEL-3693 - Add pmix_test - Resolves: RHEL-3693 - Fix CVE-2023-41915 - Resolves: RHEL-3693 - Add pmix_test - Resolves: RHEL-3693 - Fix CVE-2023-41915 - Resolves: RHEL-3693 - Add pmix_test - Resolves: RHEL-3693 - Fix CVE-2023-41915 - Resolves: RHEL-3693 - Add pmix_test - Resolves: RHEL-3693 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - FTBFS with GCC 10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - add foomatic as a dependency, because pnm2ppa drivers are not available as a driver without it - fix argument reading for non x86_64 archs - use int instead of char - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - update to https://github.com/containers/podman/releases/tag/v5.5.2 - Related: RHEL-80816 - update to https://github.com/containers/podman/releases/tag/v5.6.0 - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - update to the latest content of https://github.com/containers/podman/tree/v5.6 (https://github.com/containers/podman/commit/d46b857) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - update to the latest content of https://github.com/containers/podman/tree/v5.6-rhel (https://github.com/containers/podman/commit/56f1962) - fixes "Work on RHEL 9.7 packaging" - Related: RHEL-80816 - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - update to rhel-9.7.z version of podman - Resolves: RHEL-142896 - update to https://github.com/containers/podman/releases/tag/v5.8.0 - Related: RHEL-111919 - update to https://github.com/containers/podman/releases/tag/v5.8.1 - fixes podman restart policy `unless-stopped` does not behave exactly as `always` despite the man page saying they are identical - [RHEL-9.8] [0day] - Resolves: RHEL-157746 - enable sequoia - Resolves: RHEL-164019 - revert sequoia - only available in RHEL10 - Related: RHEL-164019 - update to https://github.com/containers/podman/releases/tag/v5.8.2 - fixes CVE-2026-34986 go-jose: Go JOSE Denial of Service via crafted JWE - Resolves: RHEL-165040 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158781 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167685 - bump to upstream commit a476c2b2 fixing CVE-2026-39835 CVE-2026-39829 CVE-2026-39832 CVE-2026-42508 CVE-2026-27136 CVE-2026-25681 CVE-2026-57231 and podman-remote save regression - rebuild for CVE-2026-39822 - Resolves: RHEL-193646 - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - restorecond: always add '\0' to ut_user - semanage: Reset active value when deleting boolean customizations - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - restorecond: always add '\0' to ut_user - semanage: Reset active value when deleting boolean customizations - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - restorecond: always add '\0' to ut_user - semanage: Reset active value when deleting boolean customizations - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - restorecond: always add '\0' to ut_user - semanage: Reset active value when deleting boolean customizations - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - restorecond: always add '\0' to ut_user - semanage: Reset active value when deleting boolean customizations - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - pkttyagent: EOF in passwd results in coredump - Resolves: RHEL-5772 - session-monitor: watch sessions only - PolkitPermission: react on really changed sessions - allow polkit-pkla-compat to be uninstalled if no .pkla rules - Resolves: RHEL-39063 - aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel - Resolves: RHEL-98662 - pkttyagent: EOF in passwd results in coredump - Resolves: RHEL-5772 - session-monitor: watch sessions only - PolkitPermission: react on really changed sessions - allow polkit-pkla-compat to be uninstalled if no .pkla rules - Resolves: RHEL-39063 - aarch64: test failure with undefined symbol: __aarch64_ldadd4_acq_rel - Resolves: RHEL-98662 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Fix a crash during signing - Resolves: RHEL-31934 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix crash in broken documents when using -dests - Resolves: RHEL-44333 - Check bitmap in combine() - Resolves: RHEL-131795, RHEL-131792 - Bump release for build inheritance - Resolves: RHEL-131792 - Fix pdfsig's man page - Resolves: RHEL-126070 - Fix integer overflow in tilingPatternFill (CVE-2026-10118) - Resolves: RHEL-180580 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to popt 1.18-rc1 - Update URLs to the new upstream - Update to popt 1.18 final (no changes from rc1) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Conditionalize static subpackage during build-time - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Address important covscan issues (#1938846) - Add gating.yaml - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - New version Resolves: RHEL-20023 - Dropped upstreamed patches - Added a RHEL-specific patch to remove an OpenSSL version mismatch warning. RHEL-128018 - Fix for CVE-2026-43964: buffer over-read via malformed enhanced status code. Resolves: RHEL-176550 - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild for adding tmt metadata - Rebuild (gdal) - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild for adding tmt metadata - Rebuild (gdal) - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild for adding tmt metadata - Rebuild (gdal) - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild for adding tmt metadata - Rebuild (gdal) - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Avoid perl(Pg) dependency on RHEL, from the Fedora spec change from yselkowi@redhat.com - Rebuild for adding tmt metadata - Rebuild (gdal) - Rebuild (GDAL) - Update to 3.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 3.5.2 - Rebuild (SFCGAL) - Update to 3.5.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Rebuild (gdal) - Update to 3.6.1 - Initial import for postgresql18 - Avoid perl(Pg) dependency on RHEL - Update to 1.1.0.Final - Rebuilt for protobuf 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for protobuf 3.13 - Rebuilt for protobuf 3.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to new release 1.4.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Build jit based on what postgresql server does Related: #1933048 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Iitial import for postgresql 15 stream - Related: #2128410 - Initial import for postgresql 16 stream - Related: RHEL-3635 - Update to 3.3.1.Final - Initial import for postgresql18 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - rebase to 42.2.28 - fix for CVE-2024-1597 - Bundle shaded ongres-* dependencies - Bundle shaded ongres-* dependencies - Fix CVE-2026-42198: limit SCRAM PBKDF2 iterations to prevent DoS - Resolves: RHEL-173489 - Add tests for CVE-2026-42198 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebase to upstream release 12.01.0000 - Rebase to upstream release 12.02.0000 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Update to 13.18 - Update to 13.22 - Define tmpfiles.d to enable ostree and bootc support - Add sysusers configuration and complete tmpfiles.d dynamically - Related: RHEL-94905 - Update to 13.23 - Resolves: RHEL-128812 (CVE-2025-12818) - fix CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Backport fix for CVE-2026-6478 from PostgreSQL 14.23 - Backport fixes for CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 - Resolves: RHEL-179799 - Resolves: RHEL-181866 - Resolves: RHEL-181950 - Resolves: RHEL-181964 - Backport fix for CVE-2026-6479 from PostgreSQL 14.23 (SSL/GSS init causes denial of service via uncontrolled recursion) - Resolves: CVE-2026-6479 - Apply patch for CVE-2026-6479 in prep section - Resolves: CVE-2026-6479 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.14 - Update to 15.15 - Resolves: RHEL-128813 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Resolves: RHEL-133896 - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51271 - Update to 15.8 - Fix build on 15.8 - Update to 15.10 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 15.12 - Update to 15.15 - Resolves: RHEL-128816 (CVE-2025-12818) - Add sysusers configuration and generate tmpfiles.d dynamically - Update to 15.17 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 15.18 - Fix CVE-2026-6478 - Update to 16.4 - Fix CVE-2024-7348 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Update to 16.10 - Update to 16.11 - Resolves: RHEL-128820 (CVE-2025-12818) - Update to 16.13 - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length - Resolves: RHEL-149371 RHEL-149404 RHEL-149338 - Enable lz4 and zstd support - Remove /var/run/postgresql - Related: RHEL-51275 - Update to 16.4 - Fix build on 16.4 - Update to 16.6 - Fixes: CVE-2024-10976 CVE-2024-10978 CVE-2024-10979 - Update to 16.8 - Fix CVE-2025-1094 - Add tmpfiles.d configuration - Add sysusers configuration for PostgreSQL 16 - Update to 16.13 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 - Update to 16.14 - Fix CVE-2026-6478 - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Enable pltcl - bash-profile fix for imagemode - Fix CVE-2026-2004: PostgreSQL intarray missing validation of type of input to selectivity estimator executes arbitrary code - Fix CVE-2026-2005: PostgreSQL pgcrypto heap buffer overflow executes arbitrary code - Fix CVE-2026-2006: PostgreSQL missing validation of multibyte character length executes arbitrary code - Fix CVE-2026-2007: PostgreSQL libpq read out-of-bound buffer error - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Initial import of 18.0 - Update to 18.1 - Update to 18.3 - Fixes: CVE-2026-2004 CVE-2026-2005 CVE-2026-2006 CVE-2026-2007 - Enable pltcl subpackage - Update to 18.4 - Fix CVE-2026-6478 - Update to 1.16. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 + power-profiles-daemon-0.11.1-1 - Update to 0.11.1 - Resolves: rhbz#2080280 - Update date to 0.13 - Support for AMD P-State - Resolves: rhbz#2226568 - Update to 0.21 - Support multi-drivers mode and amdgpu - Support dynamically adjusts amd-pstate EPP values between battery and AC modes. - Resolves: RHEL-23395 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New version Resolves: rhbz#1880071 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New version Resolves: rhbz#2044132 - fixup tmpfile to use /run instead of /var/run - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed man page and typo in the built-in help - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Update to 9.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Update to 9.6.0 - Release bump to push it into compose - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572) - Rebuild - Rebuild - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572) - Rebuild - Rebuild - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - output is not redirected when ps_mem is killed - cmdline unwanted blank spaces fixed - Resolves: rhbz#2033997 - Resolves: rhbz#2049743 - 20141121-14 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20141121-15 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 20141121-16 🐞 Workaround Fedora problems created by rpm commit 93604e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 20141121-18 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1962000 - Add gating tests from rhel-8 - Resolves:rhbz#1962000 - Add missing gating tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Recent revision - 20210518 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - unset writable-by-group permission bit on the license file - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - Rebuild for autostart fix Resolves: RHEL-40601 - tox: Only run unit tests for python 3.6 (bcl) Related: RHEL-17662 - Add conflict test between ostree sources (#2125655) (jkonecny) Related: RHEL-17662 - Fix missing seen check for output generation (#2125655) (jkonecny) Related: RHEL-17662 - Add new ostreecontainer command (#2125655) (jkonecny) Resolves: RHEL-17662 - Check the conflicting commands automatically (vponcova) Related: RHEL-17662 - Fix tests for conflicting commands (vponcova) Related: RHEL-17662 - Add conflicting commands support (bcl) Related: RHEL-17662 - Add support for inline certificates with `%certificate` section (k.koukiou) Resolves: RHEL-61432 - Switch to using tmt based tests and running unit tests during build Related: RHEL-61432 - Update %certificate section documentation (rvykydal) Related: RHEL-61432 - Make %certificate section option --dir mandatory. (rvykydal) Resolves: RHEL-76501 - workflows: run tests using only python 3.9 (bcl) Related: RHEL-75659 - workflows: Switch to using ubuntu-latest (bcl) Related: RHEL-75659 - Do not remove "md" prefix from RAID names (vtrefny) Resolves: RHEL-75659 - Deprecate the provisional -w flag for %pyproject_buildrequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild - Add the -M flag to %pyproject_save_files - The flag can be used to indicate no Python modules should be saved - Make %pyproject_buildrequires -t/-e and %tox fail when no suitable tox configuration exists - The %pyproject_buildrequires -t/-e case is temporarily allowed on Fedora 40-42 - Requires tox-current-env >= 0.0.16 - Fix reverted conditional in %pyproject_buildrequires -t/-e Fedora version comparison - Fix handling of config_settings in %pyproject_buildrequires - %pyproject_buildrequires: Do not generate BuildRequires from Requires core metadata fields - That field is deprecated and should include importable module names, not distribution packages - Related: rhbz#2378463 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Don't exit from pyproject-srpm-macros implementation of %pyproject_buildrequires - Fixes: rhbz#2391290 - On RPM 4.20+ don't put pyproject-macros-specific files in %buildsubdir - Works around https://github.com/rpm-software-management/rpm/issues/3890 - Speed %pyproject_save_files up significantly - %pyproject_extras_subpkg: Only %ghost the dist-info directory, not the content - That way, accidentally unpackaged files within are reported as errors - %pyproject_save_files: Also save top level typing stub files (.pyi) - 2.0.1, fixes #1816107 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - use %python3_sitearch in filter_provides_in, otherwise the package fails to build - 1873385 - ignore driverless utilities during tags creation - make is no longer in buildroot by default - use smaller git-core instead of git - fix invalid delete (upstream ticket #11) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (Qt 5.15.3) Resolves: bz#2061728 - 5.15.6 + sync with Fedora Resolves: bz#2061728 - 5.15.9 Resolves: bz#2175758 - Update macros from Fedora and add pathfix.py into python-rpm-macros - Resolves: RHEL-6107 - %python_extras_subpkg: Add option -a to include BuildArch: noarch - Update macros from Fedora and add pathfix.py into python-rpm-macros - Resolves: RHEL-6107 - %python_extras_subpkg: Add option -a to include BuildArch: noarch - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Update to 3.9.23 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218 - Security fix for CVE-2025-8194 Resolves: RHEL-106374 - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Rebuilt for Python 3.9 - Update to 0.10.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.10.1 (#1877703) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - Update to 1.6.5. Fixes rhbz#1964163 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Update to 1.7.1. Fixes rhbz#1999176 - Add the dist tag again - Drop redundant manually specified dependencies - Update to 1.7.3. Fixes rhbz#2005403 - Update to 1.7.4. Fixes rhbz#2011425 - Update to 1.7.5. Fixes rhbz#2022454 - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Add python-alembic to RHEL-9 Resolves: rhbz#2084557 - Rebuilt for Python 3.8 - Reduce Python 2 build time dependencies - Subpackage python2-appdirs has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.4.4 (#1834175) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.11.1 (#1709038) - Fix tests with Fish 3.1 (#1808322) - Rebuilt for Python 3.9 - Update to 1.12.0 - Fixes rhbz#1856103 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 20.1.0 (#1870794) - Update to 20.2.0 (#1876063) - Update to 20.3.0 (#1894866) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable tests on RHEL9 to avoid pulling in the test dependencies - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - New upstream maintenance release, 3.1.4 - Prevent scriplets from failing - When upgrading, restart the daemon if it's running - If uninstalling, stop the daemon - auditctl: use pidfd_send_signal for signaling auditd Resolves: RHEL-45865 - Minor doc update Resolves: RHEL-5186 - augenrules: do not exit with failure if in immutable mode Resolves: RHEL-40110 - auditd.service: Disable ProtectControlGroups Resolves: RHEL-5197 - auditctl: correct output when displaying rules with exe/path/dir Resolves: RHEL-40243 - Disable ProtectKernelModules=true in service file Resolves: RHEL-59570 - af_unix plugin: restore original behavior in binary mode Resolves: RHEL-59585 - Support image mode Resolves: RHEL-69033 - Resolve ordering cycle when using remote logging Resolves: RHEL-11252 - Filter syscalls to ensure architecture-specific availability Resolves: RHEL-70455 - Don't do "live" operations during rpm-ostree composes Resolves: RHEL-69033 - auditctl: correct buffer in filter_supported_syscalls to avoid overflow Resolves: RHEL-59585 - ausearch: correct search for DAEMON related events - allow hex digits when interpreting tty data Resolves: RHEL-82279 - Fix TTY hostname in log messages Resolves: RHEL-78323 - Update end of event detection mechanism Resolves: RHEL-78323 - ausearch-checkpoint race condition fix Resolves: RHEL-86897 - Fix POSTIN scriplet to not fail during upgrade Resolves: RHEL-138696 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Subpackage python2-augeas has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Backport upstream commit d93e1563add8c40450556b7d74520439ee792bd9 to fix the discovery of location in the test - Execute the tests at build time - Add a simple gating test to execute the test script, and make it gating for the python-augeas source - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Removing extra pkcs11 source now that upstream switched to public domain headers - Update to 0.27.2 Resolves: RHEL-113230 - Add patch fixing FIPS mode crash in awscli2 Resolves: RHEL-131280 - Update to 0.31.1 Resolves: RHEL-157871 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 2.9.0 - Disable Python 2 build on RHEL 9+ - Disable Python 2 build entirely - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Drop build dependency on python-freezegun - Resolves: rhbz#1947517 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 2.9.1. - Fixes CVE-2021-20095 Resolves: rhbz#1955615 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with LLVM 18 (RHEL-28684) - Fic bio* tools (RHEL-61615) - Explicitely disable blazesym support (RHEL-49640) - Fix gating tests of libbpf gating. - Rebase to the latest version (RHEL-63883) - Rebuild with libbpf 1.5.0 - Rebase to version 0.34.0 (RHEL-78920) - Rebuild with LLVM 20 (RHEL-81773) - Fix biosnoop pattern option (RHEL-90848) - Fix bpf-klockstat on aarch64 and ppc64le (RHEL-78619) - Remove unsupported bpf-bcachefs* and bpf-zfs* tools (RHEL-78166) - Remove unsupported slaratetop tool (RHEL-78162) - Fix bpf-klockstat on aarch64 and ppc64le debug (RHEL-78619) - Remove macro in comment. - Rebase to version 0.35.0 (RHEL-79001) - Fix bpf-ksnoop (RHEL-96166) - Fix bpf-javagc (RHEL-78173) - Rebuild with LLVM 21 (RHEL-108343) - Decode IDN names on input in all situations in utilities (RHEL-66172) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - logrotate: skip if empty and remove old variants (RHEL-113942) - Fix failures in idna system test (RHEL-66172) - Prevent cache poisoning due to weak PRNG (CVE-2025-40780) - Replace downstream fixes with upstream changes - Address various spoofing attacks (CVE-2025-40778) - Copy named.* files from /var/named into /usr/share/named - Create /var/named directories for bind-chroot (RHEL-132053) - Add sysusers named user creation (RHEL-132053) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Backport fix for nameserver line processing. (RHEL-79714) - Add forgotten _libdir/named into bind-chroot tmpfiles (RHEL-135629) - Prevent Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519) - Fix GSS-API resource leak (CVE-2026-3039) - Invalid handling of CLASS != IN (CVE-2026-5946) - Prevent cache memory exhaustion under sustained attack (CVE-2026-11622, RHEL-213397) - Fix dnssec-signzone and RRSIG wildcard validation (CVE-2026-11721) - Fix dns_rdataset_addnoqname() accepting unsigned NSEC/NSEC3 (CVE-2026-13204) - Fix RPZ name-too-long wildcard expansion (CVE-2026-11331) - Fix CVE-2026-13321: reject out-of-zone NSEC next owner names - Fix NSEC3 signer validation (CVE-2026-10723) - Align sizes up for growable LVs Resolves: RHEL-8036 Resolves: RHEL-19725 - Modified passphrase in stratis test Resolves: RHEL-8029 - Fix running tests in FIPS mode Resolves: RHEL-8029 - Set persistent allow-discards flag for newly created LUKS devices Resolves: RHEL-82430 - Do not remove PVs from devices file if disabled or doesn't exist Resolves: RHEL-84662 - Get the actual PV format size for LVMPV format Resolves: RHEL-74078 - Include additional information in PartitioningError Resolves: RHEL-8005 - Make ActionDestroyFormat optional when the device is also scheduled to be removed Resolves: RHEL-8008 Resolves: RHEL-8012 - Wipe end partition before creating it as well as the start Resolves: RHEL-76917 - Add a pre-wipe fixup function for LVM logical volumes Resolves: RHEL-68368 - iSCSI: don't crash when LUN ID >= 256 Resolves: RHEL-122858 - nvme: HostID fixes for TP4126 Resolves: RHEL-1375 - nvme: Stack smashing fixes Resolves: RHEL-13127 Resolves: RHEL-8037 - lvm: Add support for starting and stopping VG locking Resolves: RHEL-15921 - tests: Remove unreliable nvme attribute checks Resolves: RHEL-16126 - nvme: Add bd_nvme_is_tech_avail to the API file Resolves: RHEL-59588 - crypto: Add a function to set persistent flags for LUKS Resolves: RHEL-82886 - Don't allow suid and dev set on fs resize Resolves: RHEL-96039 - lvm-dbus: Fix calling lvcreate with empty list of PVs Resolves: RHEL-113928 - tests: Adjust sizes in generic FS resize test for VFAT resize Resolves: RHEL-124142 - Update to release 1.6.0. - Add dependency on systemd version - Update to release 1.6.1. - Add issues resolved by release 1.6.1 - Resolves: RHEL-36001 - Resolves: RHEL-36664 - Resolves: RHEL-36667 - Resolves: RHEL-36691 - Update to release 1.6.5. - Resolves: RHEL-59512 - Update to release 1.6.8 - Resolves: RHEL-111711 - Dropped explicit brlapi dependency (brltty) and relaxed brltty dependency (brlapi) Related: rhbz#1765611 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - OCaml 4.11.0 rebuild - OCaml 4.11.1 rebuild - Fixed brlapi.key to pass the RPM verification - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version Resolves: rhbz#1910328 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fixed brlapi multilib Resolves: rhbz#1915335 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Check BitMask(n) n value for kBrotliBitMask[n] bounds - Resolves: RHEL-133995 CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Resolves: RHEL-133995 Rebuild for CVE-2025-6176 Brotli decompression bomb DoS in scrapy - Require the same version of python3-bytesize in libbytesize-tools (v.podzimek) - src/gettext: fix warning if gettext is already present (giulio.benetti) - Update README.md (vpodzime) - fix build on shells where test == fails (tbier) - Add POT file to git and do not rebuild it during every build (vtrefny) - Fix memory leak in bs_size_new_from_str (vtrefny) - Translated using Weblate (Turkish) (oguzersen) - add translation platform widget (jean-baptiste) - Update translation files (noreply) - Do not regenerate POT file during 'make release' (vtrefny) - Remove Zanata from our build and release processes (vtrefny) - Add PO files to git (vtrefny) - Sync spec with downstream (vtrefny) - Rebuilt for Python 3.9 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add Travis build status badge (vtrefny) - Add Travis CI config and Dockerfiles for running tests (vtrefny) - Add ansible playbook for installing test dependencies (vtrefny) - remove msgcat dependency (Aduskett) - Translated using Weblate (Bengali (India)) (akarshan.biswas) - Update translation files (noreply) - Added translation using Weblate (Bengali (India)) (akarshan.biswas) - Fix library version in pkgconfig file (vtrefny) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Translated using Weblate (Hebrew) (sh.yaron) - Added translation using Weblate (Hebrew) (sh.yaron) - Add support to ppc64le for debian build (74309971+gururajrkatti) - Translated using Weblate (Finnish) (ricky.tigg) - tools: Read input from stdin when not running in a tty (vtrefny) - travis: Print logs after failed tests (vtrefny) - tests: Run pylint and pycodestyle on bscalc (vtrefny) - bscalc: Add option to print only single "human readable" result (vtrefny) - travis: Add --nogpgcheck when using dnf on Fedora (vtrefny) - Translated using Weblate (Asturian) (fitoschido) - Update translation files (noreply) - Translated using Weblate (Spanish) (fitoschido) - Sync spec with downstream (vtrefny) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.20.0 (bgz#1493325) - Move python2-cairo to a separate component - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.20.1 - Resolves: rhbz#2016905 - Ship python3-cairo-devel in CRB - Resolves: rhbz#2053665 - related: RHEL-13739 - Update to version 0.3.8 - resolves: RHEL-22301 - Fix spnego authentication - resolves: RHEL-24924 - Fix requirement on cepces-selinux - Update to version 0.3.12 - resolves: RHEL-121734 - Added channel binding support - resolves: RHEL-103417 - Update to version 0.3.13 - resolves: RHEL-133513 - Update to version 0.3.16 - related: RHEL-121734 - Update to version 0.3.17 - related: RHEL-121734 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Initial RHEL 9 package. - Remove autorelease from the spec file - Add gating.yaml - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Subpackage python2-configobj has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Change test to compare contents instead of checksum, cleanup (RhBug:2130179) - Add zstd compression support (RHEL-67689) - Add git build require, needed for binary patches (RHEL-67689) - Update to 3.19 - Drop upstreamed patches - Added patch to correctly handle SELinux labels in Kubernetes - Added latest upstream rseq patch - 2.0.1, fixes #1816107 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - use %python3_sitearch in filter_provides_in, otherwise the package fails to build - 1873385 - ignore driverless utilities during tags creation - make is no longer in buildroot by default - use smaller git-core instead of git - fix invalid delete (upstream ticket #11) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 1.5 - Update to version 1.7 - Remove check test - Resolves: rhbz#1986607 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.5.1 - Resolves: rhbz#2192384 - Remove check test - Remove BuildRequires for python3-dbus and python3-into-dbus-python - Resolves: rhbz#1986608 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.8.3 - Resolves: rhbz#2189682 - Remove check test - Remove Requires and BuildRequires for python3-pyparsing - Resolves: rhbz#1986574 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.4.1 - Resolves: rhbz#2196269 - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Update to 3.9.23 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218 - Security fix for CVE-2025-8194 Resolves: RHEL-106374 - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - rebase to distro 1.5.0 - Fix Python configuration for ELN/RHEL 9 - Rework bconds for Python now that there are no Fedoras left that should use Python2 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - reposync: Respect --norepopath with --metadata-path (RHEL-40914) - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp (RHEL-14900) - Backport patch: "dnf copr enable" on "Asahi Fedora Linux Remix" guesses (RHEL-56143) - Add forgotten changelog - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320) - Fix bogus changelog entry date - Add multisig plugin (RHEL-100157) - Fix importing OpenPGPv6 keys (RHEL-114424) - Rename dnf4-multisig(8) manual page to dnf-multisig(8) (RHEL-117134) - Document that local packages are not affected by versionlock (RHEL-94014) - Multisig: ignore untrusted signatures if there is trusted one (RHEL-145372) - reposync: Respect --norepopath with --metadata-path (RHEL-40914) - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp (RHEL-14900) - Backport patch: "dnf copr enable" on "Asahi Fedora Linux Remix" guesses (RHEL-56143) - Add forgotten changelog - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320) - Fix bogus changelog entry date - Add multisig plugin (RHEL-100157) - Fix importing OpenPGPv6 keys (RHEL-114424) - Rename dnf4-multisig(8) manual page to dnf-multisig(8) (RHEL-117134) - Document that local packages are not affected by versionlock (RHEL-94014) - Multisig: ignore untrusted signatures if there is trusted one (RHEL-145372) - reposync: Respect --norepopath with --metadata-path (RHEL-40914) - needs-restarting: Get boot time from systemd UnitsLoadStartTimestamp (RHEL-14900) - Backport patch: "dnf copr enable" on "Asahi Fedora Linux Remix" guesses (RHEL-56143) - Add forgotten changelog - reposync: Avoid multiple downloads of duplicate packages (RHEL-64320) - Fix bogus changelog entry date - Add multisig plugin (RHEL-100157) - Fix importing OpenPGPv6 keys (RHEL-114424) - Rename dnf4-multisig(8) manual page to dnf-multisig(8) (RHEL-117134) - Document that local packages are not affected by versionlock (RHEL-94014) - Multisig: ignore untrusted signatures if there is trusted one (RHEL-145372) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to version 3.0.1 (rhbz#1794914) - Rebuilt for Python 3.9 - Update to version 3.1.1 (rhbz#1837989) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.2.0 (rhbz#1905482) - Drop dependency on python-nose as tests are not included - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix TypeError: 'NoneType' object is not callable in magic.close() Resolves: RHEL-136523 - Comment out unneeded options from mods-available/eap Resolves: RHEL-30830 - Rebuild for OpenSSL rebase to 3.2.1 Resolves: RHEL-33857 - Backport fixes for BlastRADIUS CVE Resolves: RHEL-46567 - Ignore home server ping packets Resolves: RHEL-54312 - Rebuild for OpenSSL rebase to 3.5 Resolves: RHEL-88052 - Expose ca_path_reload_interval in configuration files Resolves: RHEL-93552 - Rebase to upstream 3.0.27 Resolves: RHEL-102101 - Reintroduce "Ignore home server ping packets" Resolves: RHEL-128083 - Bump release number Resolves: RHEL-128083 - fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574 - fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796 - fixes bugs bz#1832306 bz#1911292 bz#1924044 - fixes bugs bz#1939372 - fixes bugs bz#1948547 - fixes bugs bz#1927235 - fixes bugs bz#1953901 - Rebase with latest RHGS-3.5.4 - Fix changlog chronological order by removing unneeded changelogs - fixes bug bz#1939340 - remove unneeded file with ambiguous licence - fixes bug bz#1939340 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.38.0 - Explicity BuildRequire python3-setuptools - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.40.0 - Update to 3.40.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add concurrency fix Related: #1957130 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Fix the multilib problems by backporting fixes done by mhroncok from Fedora: - Move pure Python modules to a noarch subpackage - Ensure Python bytecode installed in multilib packages is bit-to-bit identical Resolves: rhbz#1915764 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add python-greenlet to RHEL-9 Resolves: rhbz#2084555 - Bump release for move of -devel subpackage to CRB Resolves: rhbz#2149497 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New upstream release (1.6.2) - New upstream release (1.6.4) - Resolves: #1821889 - New upstream release (1.6.5) - Rebuilt for Python 3.9 - New upstream release (1.6.9) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to PKI 11.5.0 - Rebase to PKI 11.5.1 - Rebase to PKI 11.6.0-alpha2 - Rebase to PKI 11.6.0 - Use external runtime dependencies - Drop pki-est subpackage - Rebase to PKI 11.7.0-beta1 - Rebase to PKI 11.7.0 - Rebase to PKI 11.7.1 - Initial packaging. - Update to 3.0.2. - Update spec per reviewer comments. - Add main package as dependency to python package. - Rebuilt for Python 3.10 - New upstream release 3.1.2 - Initial package (#1856421) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.1.1 (#1888157) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable tests on RHEL9 to remove tox dependency - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - Remove check test - Remove BuildRequires for python3-dbus-signature-pyparsing and python3-dbus - Resolves: rhbz#1986609 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.8.2 - Resolves: rhbz#2193199 - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate - Related: RHEL-114548 Rebase Samba to the latest 4.23.x release - Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA - Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9] - Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9] - Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class - Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9] - Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9] - Resolves: RHEL-124171 Include latest fixes in python3-ipatests package - Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8] - Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate - Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache - Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls - Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service - Resolves: RHEL-132334 Include latest fixes in python3-ipatests package - Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix - Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py - Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8 - Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates - Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS - Resolves: RHEL-141297 Memory leaks in IPA plugins - Resolves: RHEL-141054 IPA fails to sign zone - Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks - Resolves: RHEL-138473 Include latest fixes in python3-ipatests package - Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8 - RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'" - RHEL-146185 Names of domains from a trusted forest should be compared case-insentive - RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system) - RHEL-145854 Include latest fixes in python3-ipatests package - RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None)) - RHEL-141500 ipa use systemd-sysusers - RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured" - RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8 - Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z] - Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z] - Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version - Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z] - rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8 - new meson build system, sync with fedora packaging - Open-iSCSI upstream 2.1.11 - Open-iSCSI upstream 2.1.11 - fix regression in fw and static node records - fix CVE-2026-44943: path traversal via IQN names in discovery - fix CVE-2026-44944: iscsiuio socket credential verification bypass - fix CVE-2026-44943: path traversal via IQN names in discovery - fix CVE-2026-44944: iscsiuio socket credential verification bypass - Security fix for CVE-2024-22195 Resolves: RHEL-21349 - Security fix for CVE-2024-34064 Resolves: RHEL-35653 - Security fix for CVE-2024-56326 Resolves: RHEL-74690 - Security fix for CVE-2025-27516 Resolves: RHEL-85064 - Update to 1.0.1 Resolves: RHEL-126064 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Subpackage python2-jsonpointer has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to upstream version 2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add metapackage for python3dist(jsonschema[format]) needed by python3-bravado-core (#1878976) - Remove metapackage for python3dist(jsonschema[format]) (missing deps, #1880820) - Provide python3dist(jsonschema[format]) again (#1878976) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove unwanted packages - Resolves: bz#1935823 - Resolves: bz#1942562 - Remove +format metapackage - Resolves: rhbz#1952356 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove check test - Resolves: rhbz#1986912 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.15.2 - Resolves: rhbz#2203858 - Remove check test - Remove BuildRequires and Requires for python3-justbases - Resolves: rhbz#1986913 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.15.2 - Resolves: rhbz#2204503 - Rebase to version 1.5.6 Resolve: RHEL-34809 - Disable auto-generation of dependencies Related: RHEL-34809 - Limit max plaintext size for JWE decompression Resolves: RHEL-166029 - Log KDC timeout only once per request Resolves: RHEL-68355 - New upstream version (1.1.0) - Use DNS discovery for declared realms only (CVE-2025-59088) Resolves: RHEL-113677 - Fix DoS vulnerability based on unbounded TCP buffering (CVE-2025-59089) Resolves: RHEL-113681 - Rebase to version 1.3 - Resolves: RHEL-3336 - khci won't work with Quarkus-based Keycloak due to missing /auth path - Fix tmpfiles.d configuration related to the cert store Resolves: RHEL-104572 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Fix DB connection leaks Resolves: RHEL-108263 - Support vendor_db as logged by newer shim versions Resolves: RHEL-80455 - Support vendor_db: follow-up fix Related: RHEL-80455 - Fix for revocation notifier not closing TLS session correctly Resolves: RHEL-109656 - Properly fix the malformed certificate workaround Resolves: RHEL-111244 - Change ownership of /usr/share/keylime/tpm_cert_store to root Resolves: RHEL-106024 - Keylime: Registrar allows identity takeover via duplicate UUID registration Resolves: RHEL-130761 - Add support for TPM quotes using ECC keys Resolves: RHEL-118150 - Fix registrar authentication bypass (CVE-2026-1709) Resolves: RHEL-145391 - Add API version negotiation to keylime_tenant Resolves: RHEL-154785 - tox: Only run unit tests for python 3.6 (bcl) Related: RHEL-17662 - Add conflict test between ostree sources (#2125655) (jkonecny) Related: RHEL-17662 - Fix missing seen check for output generation (#2125655) (jkonecny) Related: RHEL-17662 - Add new ostreecontainer command (#2125655) (jkonecny) Resolves: RHEL-17662 - Check the conflicting commands automatically (vponcova) Related: RHEL-17662 - Fix tests for conflicting commands (vponcova) Related: RHEL-17662 - Add conflicting commands support (bcl) Related: RHEL-17662 - Add support for inline certificates with `%certificate` section (k.koukiou) Resolves: RHEL-61432 - Switch to using tmt based tests and running unit tests during build Related: RHEL-61432 - Update %certificate section documentation (rvykydal) Related: RHEL-61432 - Make %certificate section option --dir mandatory. (rvykydal) Resolves: RHEL-76501 - workflows: run tests using only python 3.9 (bcl) Related: RHEL-75659 - workflows: Switch to using ubuntu-latest (bcl) Related: RHEL-75659 - Do not remove "md" prefix from RAID names (vtrefny) Resolves: RHEL-75659 - Parse stuff in glibc locale names after @ which is not a script as a variant - Add ckb_IQ.UTF-8 locale - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.0.52 - add list_common_keyboards() to public api by Sundeep ANAND <suanand@redhat.com> - Update to 0.0.53 - Capitalize the return values of language_name() and territory_name() (See: https://github.com/rhinstaller/anaconda/pull/2837). - Add more translations from CLDR - Get translation changes from CLDR - Update to 0.0.54 - add list_common_languages derived from gnome-control-center by Sundeep ANAND <suanand@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for Python 3.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Add python-lark-parser to RHEL-9 Resolves: rhbz#2084554 - Fixing CVE-2025-47151 Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso - Run test suite without tox (#1918913) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix SASL get/set options on big endian platforms - Resolves: rhbz#1976827 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable openldap-servers tests as the package is fully deprecated Resolves: rhbz#2102940 - New upstream release 3.4.3 Resolves: rhbz#2158289 - Fix changelog date typo Related: rhbz#2158289 - Resolves: RHEL-77983 - Defects found by OpenScanHub - Resolves: RHEL-79673 - Improve the "result" field of ipa-healthcheck if replicas are busy - Resolves: RHEL-80496 - Can't rename users member of automember rule [rhel-9] - Resolves: RHEL-81141 - Healthcheck tool should warn admin about creating a substring index on membership attribute [rhel-9] - Resolves: RHEL-89736 - dsconf backend replication monitor fails if replica id starts with 0 [rhel-9] - Resolves: RHEL-89745 - ns-slapd crash in dbmdb_import_prepare_worker_entry() [rhel-9] - Resolves: RHEL-89753 - Nested group does not receive memberOf attribute [rhel-9] - Resolves: RHEL-89769 - Crash in __strlen_sse2 when using the nsRole filter rewriter. [rhel-9] - Resolves: RHEL-89782 - RHDS12.2 NSMMReplicationPlugin - release_replica Unable to parse the response [rhel-9] - Resolves: RHEL-95768 - Improve error message when bulk import connection is closed [rhel-9] - Resolves: RHEL-101189 - lib389/replica.py is using unexisting datetime.UTC in python3.9 - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-61347 - Directory Server is unavailable after a restart with nsslapd-readonly=on and consumes 100% CPU - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-89762 - dsidm Error: float() argument must be a string or a number, not 'NoneType' [rhel-9] - Resolves: RHEL-92041 - Memory leak in roles_cache_create_object_from_entry - Resolves: RHEL-95444 - ns-slapd[xxxx]: segfault at 10d7d0d0 ip 00007ff734050cdb sp 00007ff6de9f1430 error 6 in libslapd.so.0.1.0[7ff733ec0000+1b3000] [rhel-9] - Resolves: RHEL-104821 - ipa-restore fails to restore SELinux contexts, causes ns-slapd AVC denials on /dev/shm after restore. - Resolves: RHEL-107005 - Failure to get Server monitoring data when NDN cache is disabled. [rhel-9] - Resolves: RHEL-107581 - segfault - error 4 in libpthread-2.28.so [rhel-9] - Resolves: RHEL-107585 - ns-slapd crashed when we add nsslapd-referral [rhel-9] - Resolves: RHEL-107586 - CWE-284 dirsrv log rotation creates files with world readable permission [rhel-9] - Resolves: RHEL-107587 - CWE-532 Created user password hash available to see in audit log [rhel-9] - Resolves: RHEL-107588 - CWE-778 Log doesn't show what user gets password changed by administrator [rhel-9] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-104591 - RHDS12: Web console doesn't show Server Version [rhel-9] - Resolves: RHEL-104593 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-109034 - Allow Uniqueness plugin to search uniqueness attributes using custom matching rules [rhel-9] - Resolves: RHEL-109885 - Wrong backend database name syntax causes "Red Hat Directory Server" => "Databases" menu blank in Cockpit [rhel-9] - Resolves: RHEL-109889 - RootDN Access Control Plugin with wildcards for IP addresses fails with an error "Invalid IP address" [rhel-9] - Resolves: RHEL-109892 - On RHDS 12.6 The user password policy for a user was created, but the pwdpolicysubentry attribute for this user incorrectly points to the People OU password policy instead of the specific user policy. [rhel-9] - Resolves: RHEL-109897 - AddressSanitizer: leak in do_search [rhel-9] - Resolves: RHEL-113981 - AddressSanitizer: memory leak in memberof_add_memberof_attr [rhel-9] - Resolves: RHEL-111229 - Error showing local password policy on web UI [rhel-9] - Resolves: RHEL-112680 - Statistics about index lookup report a wrong duration [rhel-9] - Resolves: RHEL-116426 - RetroCL plugin generates invalid LDIF [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-117748 - The numSubordinates value is not matching the number of direct children. [rhel-9] - Resolves: RHEL-117771 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default - Resolves: RHEL-117782 - Ignore the memberOfDeferredUpdate setting when LMDB is used. [rhel-9] - Resolves: RHEL-121170 - Units for changing MDB max size are not consistent across different tools [rhel-9] - Resolves: RHEL-123231 - Improve the way to detect asynchronous operations in the access logs [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123258 - Typo in errors log after a Memberof fixup task. [rhel-9] - Resolves: RHEL-123272 - LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-123368 - IPA health check up script shows time skew is over 24 hours [rhel-9] - Resolves: RHEL-123766 - 389-ds-base OpenScanHub Leaks Detected [rhel-9] - Resolves: RHEL-123893 - Improve output dsctl dbverify when backend does not exist [rhel-9] - Resolves: RHEL-123897 - [WebUI] Replication tab crashes after enabling replication as a consumer [rhel-9] - Resolves: RHEL-123923 - Changelog trimming - add number of scanned entries to the log [rhel-9] - Resolves: RHEL-126552 - RHDS 12.6 doesn't handle 'ldapsearch' filter with space char in DN name correctly [rhel-9] - Resolves: RHEL-129559 - Online initialization of consumers fails with error -23 [rhel-9] - Resolves: RHEL-129580 - Fix paged result search locking [rhel-9] - Resolves: RHEL-138481 - Memory leak observed in ns-slapd with 389-ds-base-2.6.1-12 [rhel-9] - Resolves: RHEL-139825 - Rebase 389-ds-base to 2.8.x - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-140089 - Upgrading IDM to latest version: 389-ds-base and ipa-server breaks replication [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123244 - Attribute uniqueness is not enforced upon modrdn operation [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-117050 - Replication online reinitialization of a large database gets stalled. [rhel-9] - Resolves: RHEL-123279 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue [rhel-9] - Resolves: RHEL-140275 - ipa-healthcheck is complaining about missing or incorrectly configured system indexes. [rhel-9] - Resolves: RHEL-142980 - Scalability issue of replication online initialization with large database [rhel-9] - Resolves: RHEL-146899 - memory corruption in alias entry plugin [rhel-9] - Resolves: RHEL-147212 - Access logs are not getting deleted as configured. [rhel-9] - Resolves: RHEL-150907 - Remove memberof_del_dn_from_groups from MemberOf plugin [rhel-9] - Resolves: RHEL-137084 - CVE-2025-14905 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152338 - Crash ( Segmentation fault ) in atomic_compare_exchange() [rhel-9.8] - Resolves: RHEL-152335 - Crash in trim_changelog() during the Retro Changelog trimming. [rhel-9.8] - Resolves: RHEL-152356 - Getting "build_candidate_list - Database error 11" messages after migrating to LMDB. [rhel-9.8.z] - Resolves: RHEL-168967 - Web console doesn't show the sub suffix of ou=foo,ou=people,dc=example,dc=com. [rhel-9.8.z] - Resolves: RHEL-170269 - DS 12 does not handle escape char in bind user [rhel-9.8.z] - Resolves: RHEL-174524 - [RFE] Add OS-level thread names to all server threads [rhel-9.8.z] - Resolves: RHEL-178086 - CVE-2026-9064 389-ds-base: 389-ds-base: unbounded LDAP controls count in get_ldapmessage_controls_ext() causes CPU and heap amplification (remote DoS) [rhel-9.8] - Resolves: RHEL-180716 - Online export is failing when using the option "-s" [rhel-9.8.z] - Resolves: RHEL-183895 - Server shutdown during online reindex may lead to data loss [rhel-9.8.z] - Resolves: RHEL-182159 - CVE-2026-11610 389-ds-base: 389-ds-base: Heap buffer overflow in sasl_io_recv() via padded SASL UNBIND [rhel-9.8.z] - Resolves: RHEL-183103 - CVE-2026-11774 389-ds-base: 389-ds-base: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow [rhel-9.8.z] - Resolves: RHEL-183082 - CVE-2026-11770 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check [rhel-9.8.z] - Resolves: RHEL-190775 - CVE-2026-11788 389-ds-base: 389-ds-base: NULL pointer dereference in deref control plugin BER parser [rhel-9.8.z] - Resolves: RHEL-210875 - CVE-2026-15722 389-ds-base: 389-ds-base: pre-authentication stack buffer overflow in get_ruvelement_from_berval() via unbounded replica ID parsing [rhel-9.8.z] - use pathfix.py - Update to 1.5.1 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.5.2 - Update to 1.5.3 - Update to 1.6 - Update to 1.6.1 - Update to 1.6.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.6.3 - Update to libguestfs 1.50.2 resolves: RHEL-46775 - Rebase to libguestfs 1.54.0 resolves: RHEL-56809 - Fix osinfo for Windows Server 2025 resolves: RHEL-62935 - Replace Jansson with json-c resolves: RHEL-65292 - Add new APIs to allow command output > 4MB resolves: RHEL-80159 - Include host kernel information in libguestfs debugging output resolves: RHEL-83025 - Fix virt-v2v conversion of split /usr Ubuntu 22+ resolves: RHEL-87493 - Run the fstrim command twice resolves: RHEL-88508 - Remove duplicate root mountpoints in /etc/fstab resolves: RHEL-90168 - Generate correct osinfo for SLES >= 15 resolves: RHEL-95791 - Ignore blank disks in Windows drive mapping resolves: RHEL-108803 - Fix build for AlmaLinux - Avoid permission denied for yum/dnf cache - Enable building for ppc64le - Release 2.11.1 - Ignore Packager documents when running ModuleIndex.update_from_*() - Add python overrides for XMD in PackagerV3 - Add python override to ignore the GType return when reading packager files - Add PackagerV3.get_mdversion() - Release 2.11.2 - Extend read_packager_[file|string]() to support overriding the module name and stream. - Fix issue with ModuleIndex when input contains only Obsoletes documents - Fix import issue when built with Python 2 support - Add support for 'buildorder' to Packager documents - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 2.12.1 bump (bug #1956346) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.13.0 bump (bug #1984403) - Enable accept_overflowed_buildorder in tier0 tests (bug #1984403) - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - lscpu: update tests, follow max freq for scaling (RHEL-12783) - lscpu: another tests update (RHEL-12783) - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-132706 - use sysusers.d for uuidd - Rebase to 1.16.0 resolves: rhbz#2168628 - Rebase to 1.18.1 resolves: RHEL-14476 - Fix assertion in ext-mode BLOCK_STATUS (CVE-2023-5871) resolves: RHEL-15143 - Backport unit test of recent libnbd API addition resolves: RHEL-16292 - Rebase to 1.20.0 resolves: RHEL-31883 - Rebase to libnbd 1.20.2 resolves: RHEL-31883 - Fix multiple flaws in TLS server certificate checking resolves: RHEL-49801 - Print full NBD error from server resolves: RHEL-50665 - Rebase to libnbd 1.20.3 - Add nbdcopy --blkhash option resolves: RHEL-85509 - Upgrade to 2.2.25 - Fix stuck of nmstatectl show on OVS. RHEL-93176 - Upgrade to 2.2.46 - Store DNS to both iface and global DNS. RHEL-91291 - Support nmpolicy against down iface. RHEL-88989 - Support removal VLAN connection with empty ifname. RHEL-93146 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.48 - Validate OVN bridge mapping. RHEL-85787 - Support bond `lacp_active` and `ns_ip6_target`. RHEL-85784 - Support matching by PCI adress. RHEL-88993 - Apply dispatch changes first. RHEL-101742 - Fix SRIOV VF reference. RHEL-93180 - Upgrade to 2.2.49 - Ignore desired MAC for bonds with fail_over_mac. RHEL-107526 - Fix setting DNS only with search or option. RHEL-104797 - Upgrade to 2.2.50 - Support MAC referring for VLAN in gen_conf. RHEL-110369 - Introduce state: ignore for route. RHEL-107130 - Support PCI address matching in gen_conf. RHEL-110369 - Support MacSec interface in gen_conf. RHEL-110369 - Upgrade to 2.2.52 - Support interface altnative name. RHEL-110781 - Upgrade to 2.2.54. - Automatically set HSR port MAC address. RHEL-122171 - Fix OVSDB query failure on database bigger than 20KiB. RHEL-121992 - Upgrade to 2.2.56 - Allow using VRF name to specify route table. RHEL-123541 - Support OVS-DPDK dpdk-lsc-interrupt in nmstate. RHEL-125052 - Applying desired state with static DNS with static IP will touch `br-ex` even not mentioned. RHEL-126731 - Support rightca ipsec option. RHEL-123542 - Upgrade to 2.2.57 - Add libreswan leftprotoport and rightprotoport support. (RHEL-130912) - Upgrade to 2.2.58 - vrf: Handle ignore interface when verifying desired state. RHEL-141606 - alt-name: Remove alt-names when interface marked as absent. RHEL-141602 - hsr: Automatically disable IP on hsr port. RHEL-141609 - hsr: add support for configuring "interlink" property. RHEL-141608 - Support referring interface name using its alternative name. RHEL-141601 - Upgrade to 2.2.59 - Add support for lock-mtu option. RHEL-151933. - Upgrade to 2.2.60 - ipv4: Add new parameter prefix-route-metric RHEL-170695 - Rebase to version 1.9 - Backport URI parser API - Backport fix for RHEL-49544 - Update to latest upstream version RHEL-61573 - Update libnvme to version 1.11 (RHEL-67145) - TLS Fixes (RHEL-53980) - Update to version 1.13 (RHEL-88847) - Rebase to version 1.16.1 (RHEL-114102) - Respin for RHEL-114102 - Fix linked list corruption RHEL-146273 - Fix PAC buffer overflow (#1883584) - Disable mozjs backend by default, obsolete it by webkit subpackage - Depend on KDE only on Fedora (#1902608) - Tweak KDE conditionals to only apply at runtime - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Add Copyright.txt. Resolves: rhbz#1986586 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop pacrunner subpackage. Resolves: rhbz#1990974 - Drop networkmanager subpackage. Resolves: rhbz#1996028 - Drop AnacondaRHEL workflow reference - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - New upstream version 2.15.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against json-c-0.14-11 Related: rhbz#2023322 - Change the default Bugzilla group - Resolves: rhbz#2037399 - [reporter-bugzilla] Fix subcomponent handling - Resolves: rhbz#2037399 - [reporter-bugzilla] Retry XML-RPC calls - Resolves: rhbz#2037399 - Add support for AlmaLinux Bug Tracker - Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla - SELinux userspace 3.5-rc3 release - SELinux userspace 3.5 release - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - restorecon: Include <selinux/label.h> (RHEL-50821, RHEL-54385) - Close old selabel handle when setting a new one (RHEL-76472) - Include more parameters in the module checksum (#2173959) - SELinux userspace 3.6-rc1 release - SELinux userspace 3.6 release - Preserve file context and ownership in policy store (RHEL-31216, RHEL-54389) - open lock_file with O_RDWR (RHEL-60503) - Set new restorecon handle before doing restorecon (RHEL-76472) - improve performance of semanage store rebuild (RHEL-79100) - Upgrade to 1.9.5 - Use systemd-sysusers - Upgrade to 1.9.7 - FIPS correction ref: https://issues.redhat.com/browse/RHEL-376 - Upgrade to 1.10.0 - Upgrade to 1.10.1 - Rebased to libvirt-python-10.0.0 (RHEL-24822) - Rebased to libvirt-python-10.3.0 (RHEL-29643) - Rebased to libvirt-python-10.5.0 (RHEL-29643) - Rebased to libvirt-python-10.8.0 (RHEL-50576) - Rebased to libvirt-python-10.10.0 (RHEL-50576) - Rebased to libvirt-python-11.8.0 (RHEL-118198) - Rebased to libvirt-python-11.9.0 (RHEL-118198) - Rebased to libvirt-python-11.10.0 (RHEL-118198) - virDomainSaveParams: Add missing typed parameter conversion hints (RHEL-144009) - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Use libdir suffix in versioned prefix - Fix llvm-config alternatives handling (rhbz#2361779) - Update to LLVM 20.1.7 - Add riscv64 enablement bits; thanks: Songsong Zhang (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com) - Update to LLVM 20.1.8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild - Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683) - Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037) - Backport fix for build of highway package on ppc64le (rhbz#2383182) - Update to 21.1.7 - Update LLVM Toolset to 21.1.8 [rhel-9] - Remove compat libs for LLVM 20 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2023-26767 (#2181147) - Fix CVE-2023-26768 (#2181151) - Fix CVE-2023-26769 (#2181149) - Update to 4.6.2 - Fixes CVE-2020-27783 and another vulnerability in the HTML Cleaner - Fixes: rhbz#1855415 - Fixes: rhbz#1901634 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 4.6.3 - Fixes CVE-2021-28957 Resolves: rhbz#1941534 - Update the license information - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Run the tests during build - Resolves: rhbz#2026941 - Update to 4.6.5 - Fixes CVE-2021-43818 - Resolves: rhbz#2032569 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Security fix for CVE-2022-2309 - Resolves: rhbz#2107571 - Update to version 1.1.4 - Avoids test warnings on Python 3.10 Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove unnecessary python3-mock BuildRequires - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2022-40023 (#2133606) - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable Python 2 in ELN - Disable Python 2 entirely - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Merge pull request #23 from poncovka/master-decode_bytes (mkolman) - Handle bytes and strings from RPM (#1764642) (vponcova) - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman) - Fix make archive command after pot file removal (jkonecny) - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny) - Add Readme with description and translation badge (jkonecny) - Add pot file to the git ignore (jkonecny) - Pause release when making bumpver to check and solve translations (jkonecny) - Remove unused PREFIX from Makefile (jkonecny) - Remove Zanata (jkonecny) - Push translations to our translation repository (jkonecny) - Download translations from Weblate (jkonecny) - Remove pot file (jkonecny) - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman) - Fix Zanata client detection in Makefile (mkolman) - Merge pull request #33 from mzidek-gh/master (mkolman) - dump: Use exception's type and value when calculating hash (mzidek) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Merge pull request #23 from poncovka/master-decode_bytes (mkolman) - Handle bytes and strings from RPM (#1764642) (vponcova) - Merge pull request #31 from jkonecny12/master-fix-make-archive (mkolman) - Fix make archive command after pot file removal (jkonecny) - Merge pull request #29 from jkonecny12/master-weblate-support (jkonecny) - Add Readme with description and translation badge (jkonecny) - Add pot file to the git ignore (jkonecny) - Pause release when making bumpver to check and solve translations (jkonecny) - Remove unused PREFIX from Makefile (jkonecny) - Remove Zanata (jkonecny) - Push translations to our translation repository (jkonecny) - Download translations from Weblate (jkonecny) - Remove pot file (jkonecny) - Merge pull request #24 from M4rtinK/master-fix_zanata_client_detection_in_makefile (mkolman) - Fix Zanata client detection in Makefile (mkolman) - Merge pull request #33 from mzidek-gh/master (mkolman) - dump: Use exception's type and value when calculating hash (mzidek) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-65419 - httpd with python3-mod_wsgi is stalling in process destruction - fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808, CVE-2022-24809 and CVE-2022-24810 (RHEL-26649) - fix changelog issue - fix unexpected header length in /proc/net/snmp (RHEL-44357) - fix segfault with error on subcontainer (RHEL-46033) - fix inverted usage of -n in snmptrapd (RHEL-101078) - fix use after free issue (RHEL-121091) - fix help and manpage for net-snmp-create-v3-user script(RHEL-101614 and RHEL-103557) - remove wrong assert (RHEL-122095) - fix out of bound access issue (RHEL-137511) - enable PQC (RHEL-132653) - fix creation of /var/lib/net-snmp in image mode (RHEL-132655) - Rebase to version 0.10.1 Resolves: RHEL-25506 - Remove subpackage python3-netaddr-shell Resolves: RHEL-25506 - Bump version to rebuild due to brew issues Resolves: RHEL-25506 - Rebuilt for Python 3.8 - Subpackage python2-netifaces has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add -deprecated and -arg-order patches to fix FTBFS with python 3.9 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Version 2.5 - All patches except -doc have been upstreamed; drop them - Limit BuildRequires to necessary minimum in Red Hat Enterprise Linux - Skip pytest in Red Hat Enterprise Linux - Do not build -doc subpackage for Red Hat Enterprise Linux - Add -pyyaml patch to fix FTBFS - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Version 2.6.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - disable python2 subpackage on fedora >= 32 (#1763073) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Upgrade to 1.2.2. Resolves: RHBZ#1996623 - Upgrade to 1.2.3. Resolves: RHBZ#1996623 - Upgarde to 1.2.4. RHBZ#2064299 - Upgrade to 1.2.7. - Upgrade to 1.2.9. RHBZ#2153165 - Upgrade to 1.2.10. RHBZ#2153165 - New release 1.2.12 (Gris Ge) - Use latest rust-netlink crates (Gris Ge) - New release 1.2.14 (Gris Ge) - bond: support changing bond mode (Gris Ge) - Reorganize the code structure (Gris Ge) - CI: Enable VRF and ethool pause test (Gris Ge) - CI: Upgrade the version of github action tasks (Gris Ge) - test: Fix ethtool link mode test on Ubuntu (Gris Ge) - Github CI: Install extra module of running kernel (Gris Ge) - macsec: add base_iface property (Fernando Fernandez Mancera) - macsec: add MACsec interface support (Fernando Fernandez Mancera) - Bump netlink-packet-route to 0.17.1 (Fernando Fernandez Mancera) - Update to 1.23.5 - Resolves: RHEL-5520 - fix ppc64le test failures (RHEL-88575) - Update to 1.23.5 - Resolves: RHEL-5520 - fix ppc64le test failures (RHEL-88575) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: rhbz#1922352 - python-oauthlib requires python-mock - Update to upstream 3.1.0 - Gets rid of obsolete python-nose dependency - Nuke the python2/python3 conditionals, let's only support python3 - Remove the python3-oauthlib+signedtoken package - When building, skip tests that require jwt - Resolves: rhbz#1966407 - Drop python-jwt dependency from python-oauthlib - Resolves: rhbz#1935433 - python-oauthlib implements and/or uses the deprecated SHA1 algorithm by default - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove RSA support - Remove build dependency on blinker Resolves: rhbz#1984046 - python-oauthlib depends on jwt for RSA - Resolves: rhbz#2133805 - fix for CVE-2022-36087 - RFC5849 oauth1 signature base_string_uri doesn't parse IPv6 addresses Resolves: rhbz#2133805 - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Drop the dependency on six to make the package lighter - Update to 20.7 (#1902369) - Update to 20.8 (#1906985) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 20.9 Resolves: rhbz#1922545 - Disable tests on RHEL9 to remove the test dependencies - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Fix CVE-2026-16526: set FD_CLOEXEC on AF_UNIX sockets (RHEL-213688) - Fix integer overflow in __pmGetPDU() (CVE-2026-16529, RHEL-213737) - Fix missing pmproxy -Q and -S authentication flags (CVE-2026-16527, RHEL-213712) - Fix CVE-2026-16524 command injection in linux_sockets PMDA (RHEL-213668) - Update to latest stable version of PCP (RHEL-83482) - Enable AMD GPU pmda (RHEL-83154) - Update to latest stable version of PCP (RHEL-83482) - Add selinux policy for new proc_psi_t-induced failure - Backport the webapi filtering fix to allow the use of exact matching. (RHEL-85792) - Backport metric removal for pmdaopenmetrics - Backport some more fixes to the OpenMetrics PMDA (RHEL-54039) - Fix a multilib regression in PCP header files (RHEL-93186) - Fix python PMDA wrapper handling of list objects - Improve tmpfiles.d handling of empty directories - Backport fix for pmdaopenmetrics metric removal (RHEL-101745) - Backport fix for pcp2openmetrics metric hanging (RHEL-106772) - Backport fix for atop cpu utilization bug (RHEL-79767) - Update selinux policy for pmda-nvidia (RHEL-133548) - Backported memory leaks patches from pcp-7.0.3 - Initial package. - Added test script and configuration. - Add gating configuration. - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Switch the test run from nose to pytest, related: rhbz#1916787 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump epoch for the virtual pip Provide, for this package to take precedence over python3.14-pip Resolves: RHEL-178095 - Bootstrap for Python 3.9 - Rebuilt for Python 3.9 - update to 0.13.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - update to https://github.com/containers/podman-py/releases/tag/v5.0.0 - Resolves: RHEL-30257 - update to https://github.com/containers/podman-py/releases/tag/v5.2.0 - Related: RHEL-27608 - update to https://github.com/containers/podman-py/releases/tag/v5.3.0 - Resolves: RHEL-69140 - update to https://github.com/containers/podman-py/releases/tag/v5.4.0.1 - Resolves: RHEL-81952 - update to https://github.com/containers/podman-py/releases/tag/v5.5.0 - Related: RHEL-80816 - update to https://github.com/containers/podman-py/releases/tag/v5.6.0 - Related: RHEL-111919 - update to https://github.com/containers/podman-py/releases/tag/v5.7.0 - Related: RHEL-111919 - semanage: Allow modifying records on "add" - semanage: Do not sort local fcontext definitions - restorecond: always add '\0' to ut_user - semanage: Reset active value when deleting boolean customizations - sandbox/seunshare: Replace system() with execv() to prevent shell injection - seunshare: fix the frail tmpdir cleanup - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Subpackage python2-prettytable has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release 1.27 - Switch sources to tar.gz - New upstream release - Fix Python 2 conditional for ELN - New upstream release - New upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.0.41 Resolves: RHEL-162818 - Applied patch for CVE-2022-1941 (#RHEL-40872) - Applied patch to make emacs dependency optional (#RHEL-40572) - Rebuild - Rebuild - Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits - Disable test_leak_mem test. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Remove unnecessary test dependency on python3-mock - Remove unnecessary macro __provides_exclude_from - Drop python2-psutil Resolves: rhbz#1913682 - Add tolerance to a flaky test Resolves: rhbz#1913682 - Skip 2 tests that fail in brew due to broken IPv6 Resolves: rhbz#1913682 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Separate the tests to their own subpackage Resolves: rhbz#1990466 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebase to upstream version 2.8.5 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to upstream version 2.8.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Add manual Obsoletes for python39-psycopg2-doc - Related: rhbz#1990421 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Multiple translation updates - Add usersubstr check for substrings of N characters from the username patch by Danny Sauer - Translation updates - Fix regression with enabling the cracklib check during build - Resolves rhbz#1919026 libpwquaily rpm requires cracklib-dict to function but RPM missing requirement - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - cracklib-dicts is a hard requirement, not a recomendation. - Resolves rhbz#1947882 - added i18n updates for de, fr, ja, ko, zh_CN - Resolves: rhbz#1963858 - Resolves: rhbz#1938621 - rebuilt - Explicitly rebuild the localization - Resolves: rhbz#1938621 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.9 - Update to 1.8.2. - Update to 1.9.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.10.0. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Add gating configuration and a simple smoke test - Related: rhbz#1950291 - Resolves: RHEL-148154 - Resolves: RHEL-148154 - Fix CVE-2026-59886: prevent overflow in Real type float conversion - Resolves: RHEL-217915 - Resolves: RHEL-148154 - Resolves: RHEL-148154 - Fix CVE-2026-59886: prevent overflow in Real type float conversion - Resolves: RHEL-217915 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.36.0 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.37.90 - Update to 2.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 2.38.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8.0rc1 (#1748018) - Update to upstream version 1.9.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to upstream 1.11.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Disable tests that use genisoimage Resolves: rhbz#1972212 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - relax crypto policy for the test-suite to make it pass again (#1863711) - update to 7.43.0.6 - make the code compile against python-3.10.0a1 (#1890442) - make build dependencies for upstream tests optional - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - temporarily remove a failing test-case (#1927655) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - update to 0.26 (#1780153) - make main package archful to run tests on all arches (pythonN-pyelftools subpackages are still noarch) - run readelf tests on x86_64 only for now - rename binaries to conform to Python packaging guidelines - enable python3 subpackage for EPEL7 - declare bundled old construct module instead of needlessly requiring it - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to 0.27 (#1891845) - run readelf tests on all arches - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Updated to 1.5.14. - Fix typo in requirements - Rebuilt for Python 3.9 - Relax dateutil requirement in requirement.txt as well (#1835084) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Updated to 1.5.16. - Updated to 1.5.19. - Updated to 1.5.29. - Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL. Inspired by python-sushy. - Updated to 1.5.34. - Rebuilt for Python 3.8 - Upstream released 4.0.27 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Upstream released 4.0.30 - Add Recommendation to install database connector - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Upgrade to pyparted-3.11.7 (BZ#1890443) - Set PY_SSIZE_T_CLEAN for the build (bcl) - add nvme support - Update RELEASE file to make last step be "make pypi" (dcantrell) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Patch pyparted to handle PED_DISK_TYPE_PARTITION_TYPE_ID for the msdos disk type and PED_DISK_TYPE_PARTITION_TYPE_UUID for the gpt label Resolves: rhbz#2103243 - Initial package Resolves: bz#2090327 - 12.11.1 Resolves: bz#2188589 - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - update to version 0.17.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Replace pypi_name macro with srcname - Update BR’s - Run the doctests - Build documentation in a new -doc subpackage - Use the GitHub tarball instead of the PyPI tarball - Switch URL to HTTPS - Parallelize Sphinx documentation build - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Don't BuildRequire python3-hypothesis and exclude affected tests from %check - Resolves: rhbz#1928125 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Subpackage python2-pyserial has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Allow pluggy >=1.0 Resolves: RHEL-29656 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix FTBFS with newest tzdata Resolves: RHEL-676 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Drop Python 2. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - BR python3-setuptools - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to upstream release v51.0 - Resolves: RHEL-24473, RHEL-23180 - Rebase to upstream release v54.0 - Resolves: RHEL-52886, RHEL-54647, RHEL-51876 - Fix data corruption in bnxt_re - Resolves: RHEL-89179 - Rebase to upstream release v57.0 - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449 - Fix pyverbs tests - Resolves: RHEL-107929, RHEL-107930 - Rebase to upstream release v60.0 - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v61.0 - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebuilt for gating testing - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Go back to 0.14.6 ref. https://bugzilla.redhat.com/show_bug.cgi?id=1868128 - Fix build failure Bad source: /builddir/build/SOURCES/pywbem-0.14.6.tar.gz: No such file or directory - Add epoch to override the newer version that cannot be installed. - New build to do a multi-build - Update to 0.15.0 for python 3.8 fixes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - https://bugzilla.redhat.com/show_bug.cgi?id=1922368 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - https://bugzilla.redhat.com/show_bug.cgi?id=1975381 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8.0rc1 (#1748018) - Subpackage python2-pyxdg has been removed See https://fedoraproject.org/wiki/Changes/Mass_Python_2_Package_Removal - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - update to 0.27 - Backport a rawhide patch to fix the gating tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1935839 Remove python-imaging build requirements for RHEL - Run unit tests during build - Build only python3-qrcode-core on RHEL - Related: #1935839 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (Qt 5.15.3) Resolves: bz#2061728 - 5.15.6 + sync with Fedora Resolves: bz#2061728 - 5.15.9 Resolves: bz#2175758 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (Qt 5.15.3) Resolves: bz#2061728 - 5.15.6 + sync with Fedora Resolves: bz#2061728 - 5.15.9 Resolves: bz#2175758 - Add support for IPv6 CIDR in no_proxy setting Resolves: RHEL-17548 - Security fix for CVE-2024-35195 Resolves: RHEL-37609 - Security fix for CVE-2024-47081 Resolves: RHEL-105461 - Add support for IPv6 CIDR in no_proxy setting Resolves: RHEL-17548 - Security fix for CVE-2024-35195 Resolves: RHEL-37609 - Security fix for CVE-2024-47081 Resolves: RHEL-105461 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Make Content-Length optional - Fix python2 compatibility - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream release (1.4.0) Resolves: RHEL-103416 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.3.0. Fixes bug #1769415 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Drop python2 support - actually run unit tests - drop unused python3-mock dependency - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Don't use SIGNATURE_RSA - Related: #1935433 - python-oauthlib implements and/or uses the deprecated SHA1 algorithm by default - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial package. - Forked from https://fedora.pkgs.org/rawhide/fedora-x86_64/python3-resolvelib-0.5.5-2.fc35.noarch.rpm.html however downgraded to 0.5.4 due to 0.5.5 being yanked from pypi. - From `python3-foo` packages automatically generate `python3.X-foo` Obsoletes tags on CentOS/RHEL - Resolves: rhbz#1990421 - Avoid needless pkg_resources import in pythonbundles.py - Resolves: RHEL-6110 - Update macros from Fedora and add pathfix.py into python-rpm-macros - Resolves: RHEL-6107 - %python_extras_subpkg: Add option -a to include BuildArch: noarch - Update to version 2.1.75 - Update to version 2.1.76 - Rebuilt for Python 3.8.0rc1 (#1748018) - Update to 0.16.6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add CI test. Resolves: rhbz#2009152 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Update to 0.2.6 - Fix for type demotion issues on s390x - Resolves: BZ#2042422 - Rebuilt for Python 3.11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Confirm License is SPDX MIT - Reduce macro indirection, etc. - Drop unused manual runtime dependency on setuptools - Add a note about the circular dependency with ruamel.yaml - Stop numbering sources and patches - Update URL (close RHBZ#1840610) - Add an import-only “smoke test” - Properly handle libyaml bundling - Port to pyproject-rpm-macros (“new Python guidelines”) - Add a link to the upstream issue for the Cython workaround - Update to 0.2.7 - Rebuilt for Python 3.12 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - fix rpm issues - upstream release, fix rpm issues - upstream release - fix invalid strcpy in direct dump - upstream release 3.9.5, and udevadm settle patch - spec file fixes - new nodelay flag for add_lockspace - new upstream release - Bump release. - new upstream release - Don't package scapy tests (Andrea Claudi) - Fix scapy compliance with pep-0440 (Andrea Claudi) [2162667] - New version 2.5.0 (Andrea Claudi) [RHEL-657] - New version 2.6.1 (Andrea Claudi) [RHEL-657] - Update to 1.9.3 - Resolves: RHEL-5600 - Apply upstream patch: MAINT:linalg:Adjust lwork/liwork changes OpenBLAS 0.3.26 - Resolves: RHEL-70908 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 0.38 - 0.38.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Don't run tests on the centos and rhel because of missing required packages - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New version - 1.8 (Jiri Konecny) - Add missing make command to spec file (Jiri Konecny) - Don't translate the prompt keys (Vendula Poncova) - Enable daily build for Anaconda-devel COPR repository (Jiri Konecny) - Use Fedora container registry instead of Dockerhub (Jiri Konecny) - Migrate COPR daily COPR builds to Packit (Jiri Konecny) - Test build on Fedora ELN (Jiri Konecny) - Remove packit get-current-action (Jiri Konecny) - Run tests in GitHub workflow (Martin Pitt) - Fix raise-missing-from (W0707) pylint warnings (Martin Pitt) - Fix pylint to check test code correctly (Jiri Konecny) - Use script to run unit tests (Jiri Konecny) - Use relative imports in tests (Jiri Konecny) - Change directory structure of unit tests (Jiri Konecny) - Fix documentation of _process_screen method (Jiri Konecny) - Fix pylint issues (Jiri Konecny) - Use pylint instead of pocketlint (Jiri Konecny) - Add coverage support (Jiri Konecny) - Make link to exmples directory in Readme (Jiri Konecny) - Fix homepage of the project in setup.py (Jiri Konecny) - Fix classifiers in setup.py (Jiri Konecny) - Add pypi-upload to Makefile (Jiri Konecny) - Use correct variant of the field (Jiri Konecny) - Propose Fedora update only to Fedora in development (Jiri Konecny) - Add upstream tag template to packit for releasing (Jiri Konecny) - Packit will download archive from Source0 if needed (Jiri Konecny) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix bumpver Makefile target (Jiri Konecny) - Add tests for UIScreen wide disabling of concurrency check (Jiri Konecny) Related: rhbz#2134889 - Abstract registering signal handler in the InputHandler constructor (Jiri Konecny) Related: rhbz#2134889 - Allow to disable concurrency check for all UIScreen inputs (Jiri Konecny) Resolves: rhbz#2134889 - Add Makefile target for local container tests (Jiri Konecny) - Use localization from rhel-9 weblate translation component (Jiri Konecny) - Remove changelog from the upstream spec file (Jiri Konecny) - Fix spec file archive link (Jiri Konecny) - Include also documentation to the tarball (Jiri Konecny) - Rename doc directory to docs (Jiri Konecny) - Add explanations of what is included in the MANIFEST.in file (Jiri Konecny) - Update packit config to reflect new tag naming (Jiri Konecny) - Change tag name to just version (Jiri Konecny) - Fix GitHub workflow checkout (Jiri Konecny) - Switch to packit new fedora-latest alias (Jiri Konecny) - Disable duplicate-code in pylint test (Jiri Konecny) - Remove duplicate of code between event loops (Jiri Konecny) - Update to upstream 0.4.3 - Update test path in main.fmf - Bump tests/upstream/main.fmf duration to 30m - Update to upstream 0.5.1 - Update TMT configuration - Update to upstream 0.5.2 - Update expected string in TMT version test - schedule: fix TIMELINE policy retention indexing when keep_x > len(x) - Update to upstream 0.7.0 - Update the version test expectation. - Update to upstream 0.4.3 - Update test path in main.fmf - Bump tests/upstream/main.fmf duration to 30m - Update to upstream 0.5.1 - Update TMT configuration - Update to upstream 0.5.2 - Update expected string in TMT version test - schedule: fix TIMELINE policy retention indexing when keep_x > len(x) - Update to upstream 0.7.0 - Update the version test expectation. - Some static analysis fixes for unitialized structs Resolves: RHEL-25498 - Fix a memory leak in parse_package() of repo conda (RHEL-25496) - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Backport "choice rules: also do solver_choicerulecheck for package downgrades" Resolves: RHEL-141449 - Backport "Implement color filtering when adding update targets" Resolves: RHEL-103995 - Backport "choice rules: also do solver_choicerulecheck for package downgrades" Resolves: RHEL-141449 - Fix a buffer overflow when decompressing solv pages (CVE-2026-48864) (RHEL-178982) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed FTBFS - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.10.1 - Fix crash with python 3.9 (#1878276) - Update to 0.10.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - version 1.4.29 - version 1.4.31 - version 1.4.32 - don't BR: python3-pytest-xdist on EL9 - remove obsolete (no-op) tweak of setup.cfg - version 1.4.34 - version 1.4.35 - version 1.4.36 - version 1.4.37 - Add python-sqlalchemy to RHEL-9 Resolves: rhbz#2084556 - Remove obsolete cruft from the specfile, follow the packaging guidelines - Remove also extra packages we have no runtime dependencies for Related: rhbz#2084556 - Update to current version - 1.4.45 Resolves: rhbz#2152649 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - Remove jQuery from Doxygen output (RHEL-77697) - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Fix ssl.SSLError: [ASN1: NOT_ENOUGH_DATA] not enough data with OpenSSL 3.5.7+ Resolves: RHEL-194207 - Security fix for CVE-2026-15308 Resolves: RHEL-193786 - Security fix for CVE-2026-11940 Resolves: RHEL-227228 - Update to 3.9.23 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98051, RHEL-98024, RHEL-98242, RHEL-98193, RHEL-98218 - Security fix for CVE-2025-8194 Resolves: RHEL-106374 - Update to Python 3.9.24 - Update to Python 3.9.25 - Move _sysconfigdata_d_linux*.py to the debug subpackage - Security fix for CVE-2025-12084 Resolves: RHEL-135897 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143117 Resolves: RHEL-143174 Resolves: RHEL-144897 - Rebuilding previous fixes for different build target Related: RHEL-143117, RHEL-143174, RHEL-144897 - Security fix for CVE-2026-4519 Resolves: RHEL-158117 - Security fixes for CVE-2026-4786 and CVE-2026-6100 Resolves: RHEL-167919, RHEL-168161 - Update to 0.10.1 (#1835567) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use pyproject-rpm-macros - Don't BR pytest-cov - Update to 0.10.2 - Fixes: rhbz#1893498 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Disable tests on RHEL9 to avoid pulling in the test dependencies - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Initial package for RHEL 9 - Resolves: rhbz#2175213 - Fedora+EPEL contributions by: Maxwell G <gotmax@e.email> Michel Alexandre Salim <salimma@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> - Update to 6.4.2 Resolves: RHEL-68667 - Bump release to prevent clash with 9.5.z NVR Resolves: RHEL-68667 - httputil: Raise errors instead of logging in multipart/form-data parsing Resolves: RHEL-91998 - Update to 6.5.5 Resolves: RHEL-160942 - Create /var/run/reboot-required file (frostyx@email.cz) - Recommend the correct command for restarting auditd (frostyx@email.cz) - Add python3-setuptools dependency (frostyx@email.cz) - Fix argument passed to print_helper() (ferdnyc@gmail.com) - Add similar software to the readme (frostyx@email.cz) - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com) - Oracle Linux 8 uses dnf, too (suttner@atix.de) - Drop python-setuptools runtime dependency (frostyx@email.cz) - Fix Python DeprecationWarning: invalid escape sequence (jvanderwaa@redhat.com) - Add readthedocs configuration file (frostyx@email.cz) - Update license to SPDX (frostyx@email.cz) - Update tito releasers (frostyx@email.cz) - Rather create a /run/reboot-required not /var/run/reboot-required (frostyx@email.cz) - Fix querying RPM files on EPEL7 (frostyx@email.cz) - Use backported lru_cache on EPEL7 (frostyx@email.cz) - Don't hang forever when executed via SSH (frostyx@email.cz) - Don't check if package is installed before listing its files (frostyx@email.cz) - Replace regexes where they are not needed (frostyx@email.cz) - Query all packages at once, its faster than one by one (frostyx@email.cz) - Cache some properties for a massive performance boost (frostyx@email.cz) - Refactor unnecessary condition (frostyx@email.cz) - Fix weird indentation (frostyx@email.cz) - Pass the whole application to the provided_by function, not just its name (frostyx@email.cz) - Stop using deprecated rpm.fi (frostyx@email.cz) - Attempt to fix readthedocs deprecation error (frostyx@email.cz) - More reliable check if /usr/lib/sysimage/dnf/ database should be used (frostyx@email.cz) - Fix parameters for specifying the target user (frostyx@email.cz) - Resolves: RHEL-6988 - Rebuild with gating.yaml - Add possibility to disable unbound-anchor by file presence - Resolves: RHEL-78694 - Add as112 networks config file - Resolves: RHEL-78696 - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL‑177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL-177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix CVE-2026-40622 (RHEL-184840) Fix CVE-2026-44390 (RHEL-186688) Fix CVE-2026-41292 (RHEL-187352) Fix CVE-2026-42534 (RHEL-187095) - Fix CVE-2026-55973 (RHEL-212809) - Rebuilt for Python 3.8 - Rebuilt for Python 3.8.0rc1 (#1748018) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release (1.0.2) - Drop dependency on python-nose - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - update to version 23.11 - add uki-direct subpackage - Resolves: RHEL-19383 - add "obsoletes: rhel-cvm-update-tool" to uki-direct - update to version 24.1 - Resolves: RHEL-21090 - update to version 24.1.1 - update to version 24.2 - update to version 24.4 - update to version 24.7 - update to version 24.11 - Resolves: RHEL-69507 - backport bootctl fix for 99-uki-uefi-setup.install - Resolves: RHEL-84984 - make volume_key FIPS compliant (RHEL-78044) - ake getting password from backed up secret FIPS compatible (RHEL-113757) - Update to 0.2.4 - Update to 0.2.5 (#1850238) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove check test - Resolves: rhbz#1988144 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add automatically generated Obsoletes tag with the python39- prefix for smoother upgrade from RHEL8 - Related: rhbz#1990421 - Rebuild after move into AppStream - Related: rhbz#2066456 - Update to 14.2 and add patch to remove shell=True Resolves: RHEL-113034 - Bump revision to address packaging issues Resolves: RHEL-157865 - Add py_ssize_t_clean module support for compatibility with python-qt5 Resolves: RHEL-27554 - Rebuilt for Python 3.8.0rc1 (#1748018) - Drop forgotten build dependency on python2-pyusb - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.3.3 - Removing py3 patches - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Use pytest instead of nose (#1918336) - Don't use is to compare literals (#1749216) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haikel Guemar <hguemar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> - Security fix for CVE-2024-36039 Resolves: RHEL-38370 - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haikel Guemar <hguemar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> - Security fix for CVE-2024-36039 Resolves: RHEL-38370 - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Eric Smith <brouhaha@fedoraproject.org> Gwyn Ciesla <limburgher@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Joel Capitao <jcapitao@redhat.com> John Dulaney <jdulaney@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <nathaniel@themccallums.org> Orion Poplawski <orion@cora.nwra.com> Parag Nemade <pnemade@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> - Initial package - Fedora contributions by: Gwyn Ciesla <limb@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> - Initial package - Fedora contributions by: Alfredo Moralejo <amoralej@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <christian@python.org> Colin Walters <walters@verbum.org> Dennis Gilmore <dennis@ausil.us> Fabio Valentini <decathorpe@gmail.com> Felix Schwarz <felix.schwarz@oss.schwarz.eu> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Lumir Balhar <lbalhar@redhat.com> Matěj Cepl <mcepl@cepl.eu> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <npmccallum@redhat.com> Randy Barlow <randy@electronsweatshop.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Troy Dawson <tdawson@redhat.com> - Add explicit dependency on python3.11-rpm-macros - Rebuild for gating - Security fix for CVE-2023-23931 - Bump release for rebuild - Security fix for CVE-2023-49083 - Resolves: RHEL-19832 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Paul Wouters <pwouters@redhat.com> Robert Kuska <rkuska@redhat.com> Tom Prince <tom.prince@ualberta.net> - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Initial package - Fedora contributions by: Alexander Todorov <atodorov@redhat.com> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Fabio Alessandro Locati <fale@redhat.com> Igor Raits <ignatenkobrain@fedoraproject.org> Jason ティビツ <tibbs@fedoraproject.org> Jeffrey C. Ollie <jcollie@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mikolaj Izdebski <mizdebsk@redhat.com> Miro Hrončok <miro@hroncok.cz> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Shahms King <shahms@fedoraproject.org> Slavek Kabrda <bkabrda@redhat.com> tomspur <tomspur@fedoraproject.org> Ville Skyttä <scop@fedoraproject.org> - Remove the extras subpackages - Remove the isoschematron submodule - Bring back the isoschematron submodule, but without the validation of the schema file itself - Resolves: RHEL-5570 - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Alexander Bokovoy <abokovoy@redhat.com> Bill Nottingham <notting@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jakub Dorňák <jakub.dornak@misli.cz> James Bowes <jbowes@repl.ca> Jan Kaluza <jkaluza@redhat.com> jbowes <jbowes@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Joe Orton <jorton@redhat.com> joshkayse <joshkayse@fedoraproject.org> Kevin Fenzi <kevin@fedoraproject.org> Luboš Uhliarik <luhliari@redhat.com> Luke Macken <lmacken@fedoraproject.org> Matthias Runge <mrunge@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Ricky Zhou (周家杰) <ricky@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <sharkcz@fedoraproject.org> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <limburgher@gmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Jon Ciesla <limb@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Robert Kuska <rkuska@redhat.com> Simone Caronni <negativo17@gmail.com> Thomas Spura <tomspur@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Ville Skyttä <scop@fedoraproject.org> - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <sharkcz@fedoraproject.org> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <limburgher@gmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Jon Ciesla <limb@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Robert Kuska <rkuska@redhat.com> Simone Caronni <negativo17@gmail.com> Thomas Spura <tomspur@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Ville Skyttä <scop@fedoraproject.org> - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218247 - Require Python with tarfile filters Resolves: RHEL-25455 - Fix Bash completion Resolves: RHEL-100071 - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHBZ#2218247 - Require Python with tarfile filters Resolves: RHEL-25455 - Fix Bash completion Resolves: RHEL-100071 - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Thomas Spura <tomspur@fedoraproject.org> Tom spot Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim GÜNDÜZ <devrim@fedoraproject.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason Tibbitts <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Kubat <pkubat@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Todd Zullinger <tmz@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@fedoraproject.org> - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> Dennis Gilmore <dennis@ausil.us> Eric Smith <brouhaha@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <nathaniel@themccallums.org> Orion Poplawski <orion@cora.nwra.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Initial package - Fedora contributions by: Carl George <carl@george.computer> Charalampos Stratakis <cstratak@redhat.com> Kevin Fenzi <kevin@scrye.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Raphael Groner <raphgro@fedoraproject.org> Tim Orling <timothy.t.orling@linux.intel.com> - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <ausil@fedoraproject.org> dmalcolm <dmalcolm@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jakub Čajka <jcajka@redhat.com> Jesse Keating <jkeating@fedoraproject.org> John Eckersberg <jeckersb@fedoraproject.org> Kalev Lember <klember@redhat.com> Lumir Balhar <lbalhar@redhat.com> Mamoru Tasaka <mtasaka@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Arun SAG <sagarun@gmail.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Rex Dieter <rdieter@math.unl.edu> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Toshio Kuratomi <toshio@fedoraproject.org> yatinkarel <ykarel@redhat.com> - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Arun SAG <sagarun@gmail.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Rex Dieter <rdieter@math.unl.edu> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Toshio Kuratomi <toshio@fedoraproject.org> yatinkarel <ykarel@redhat.com> - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Arun SAG <sagarun@gmail.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Rex Dieter <rdieter@math.unl.edu> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Toshio Kuratomi <toshio@fedoraproject.org> yatinkarel <ykarel@redhat.com> - Initial package - Fedora contributions by: Antonio Trande <anto.trande@gmail.com> Bill Nottingham <notting@fedoraproject.org> Björn Esser <me@besser82.io> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> David Malcolm <dmalcolm@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Jitka Plesnikova <jplesnik@redhat.com> Jonathan Wakely <jwakely@redhat.com> Jon Ciesla <limb@fedoraproject.org> Kalev Lember <klember@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mamoru TASAKA <mtasaka@fedoraproject.org> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomas Tomecek <ttomecek@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@fedoraproject.org> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Update to 1.10.0 - Update to 1.10.1 - Fix test_milp_timeout failure - Security fix for CVE-2024-6345 Resolves: RHEL-49992 - Make sure the INSTALLER is not pip and remove RECORD Resolves: RHEL-82611 - Security fix for CVE-2025-47273 Resolves: RHEL-101116 - Security fix for CVE-2024-6345 Resolves: RHEL-49992 - Make sure the INSTALLER is not pip and remove RECORD Resolves: RHEL-82611 - Security fix for CVE-2025-47273 Resolves: RHEL-101116 - Initial package - Fedora contributions by: Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenko@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Matthias Runge <mrunge@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@nwra.com> Pádraig Brady <P@draigBrady.com> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tomas Hrnciar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tom Callaway <spot@fedoraproject.org> yatin <ykarel@redhat.com> - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-178519 - Security fix for CVE-2025-0938 Resolves: RHEL-77262 - Update to 3.11.13 - Security fixes for CVE-2025-4517, CVE-2025-4330, CVE-2025-4138, CVE-2024-12718, CVE-2025-4435 Resolves: RHEL-98044, RHEL-98014, RHEL-98237, RHEL-98176, RHEL-98205 - Fix PySSL_SetError handling SSL_ERROR_SYSCALL - This fixes random flakiness of test_ssl on stressed machines Resolves: RHEL-101551 - Security fix for CVE-2025-8194 Resolves: RHEL-106365 - Security fix for CVE-2025-12084 Resolves: RHEL-135395 - Security fix for CVE-2025-13836 Resolves: RHEL-141025 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143110 Resolves: RHEL-143170 Resolves: RHEL-144894 - Rebuilding previous fixes for different build target Related: RHEL-143110, RHEL-143170, RHEL-144894 - Security fix for CVE-2026-4519 Resolves: RHEL-158053 - Security fixes for CVE-2026-4786, CVE-2026-6100 Resolves: RHEL-168158, RHEL-167916 - Security fix for CVE-2024-37891 Resolves: RHEL-59991 - Fix test_ssltransport for changes in ssl.SSLSocket in Python 3.11.3 Related: RHEL-59991 - Security fix for CVE-2023-45803 Resolves: RHEL-66551 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-140565, RHEL-139404 - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Miro Hrončok <miro@hroncok.cz> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tomas Hrnciar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> - Disable bootstrap - Explicitly require the python3.11-rpm-macros - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Update to Python 3.12.14 Resolves: RHEL-227215 - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haikel Guemar <hguemar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Yaakov Selkowitz <yselkowi@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Security fix for CVE-2024-36039 Resolves: RHEL-38371 - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haikel Guemar <hguemar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Yaakov Selkowitz <yselkowi@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Security fix for CVE-2024-36039 Resolves: RHEL-38371 - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Eric Smith <brouhaha@fedoraproject.org> Gwyn Ciesla <limburgher@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Joel Capitao <jcapitao@redhat.com> John Dulaney <jdulaney@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <nathaniel@themccallums.org> Orion Poplawski <orion@cora.nwra.com> Parag Nemade <pnemade@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Lumír Balhar <lbalhar@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Alfredo Moralejo <amoralej@redhat.com> Benjamin A. Beasley <code@musicinmybrain.net> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <christian@python.org> Colin Walters <walters@verbum.org> Dennis Gilmore <dennis@ausil.us> Fabio Valentini <decathorpe@gmail.com> Felix Schwarz <felix.schwarz@oss.schwarz.eu> Haikel Guemar <hguemar@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Lumir Balhar <lbalhar@redhat.com> Matěj Cepl <mcepl@cepl.eu> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <npmccallum@redhat.com> Randy Barlow <randy@electronsweatshop.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Troy Dawson <tdawson@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Update to 41.0.7, fixes CVE-2023-49083 - Security fix for CVE-2025-24898 in the bundled openssl crate Resolves: RHEL-77735 - Security fix for CVE-2024-26130 Resolves: RHEL-112485 - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Update to Python 3.12.14 Resolves: RHEL-227215 - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Dennis Gilmore <dennis@ausil.us> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Paul Wouters <pwouters@redhat.com> Robert Kuska <rkuska@redhat.com> Tom Prince <tom.prince@twistedmatrix.com> - Rebuilt for timestamp .pyc invalidation mode - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Update to Python 3.12.14 Resolves: RHEL-227215 - Initial package - Fedora contributions by: Alexander Todorov <atodorov@redhat.com> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Fabio Alessandro Locati <me@fale.io> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason ティビツ <tibbs@fedoraproject.org> Jeffrey C. Ollie <jeff@ocjtech.us> Jesse Keating <jkeating@fedoraproject.org> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mikolaj Izdebski <mizdebsk@redhat.com> Miro Hrončok <miro@hroncok.cz> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Shahms King <shahms@fedoraproject.org> Slavek Kabrda <bkabrda@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> tomspur <tomspur@fedoraproject.org> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Alexander Bokovoy <abokovoy@redhat.com> Bill Nottingham <notting@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jakub Dorňák <jakub.dornak@misli.cz> James Bowes <jbowes@repl.ca> Jan Kaluza <jkaluza@redhat.com> jbowes <jbowes@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Joe Orton <jorton@redhat.com> joshkayse <joshkayse@fedoraproject.org> Kevin Fenzi <kevin@fedoraproject.org> Luboš Uhliarik <luhliari@redhat.com> Luke Macken <lmacken@fedoraproject.org> Matthias Runge <mrunge@redhat.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Ricky Zhou (周家杰) <ricky@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@cora.nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Thomas Spura <tomspur@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowitz@fedoraproject.org> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@cora.nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Thomas Spura <tomspur@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowitz@fedoraproject.org> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Jon Ciesla <limburgher@gmail.com> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@fedoraproject.org> Kevin Kofler <Kevin@tigcc.ticalc.org> Luke Macken <lmacken@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <m.cyprian@gmail.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Pádraig Brady <P@draigBrady.com> Peter Halliday <hoangelos@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tim Flink <tflink@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <tomas.n@orsava.cz> Toshio Kuratomi <toshio@fedoraproject.org> Ville Skyttä <ville.skytta@iki.fi> - Rebuilt for timestamp .pyc invalidation mode - Don't RPM Provide pip - Remove a superfluous RPM Conflict with python-pip - Allows to install python3.12-pip together with python3-pip - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHEL-25737 - Fix Bash completion Resolves: RHEL-99083 - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Jon Ciesla <limburgher@gmail.com> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@fedoraproject.org> Kevin Kofler <Kevin@tigcc.ticalc.org> Luke Macken <lmacken@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <m.cyprian@gmail.com> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Pádraig Brady <P@draigBrady.com> Peter Halliday <hoangelos@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tim Flink <tflink@fedoraproject.org> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <tomas.n@orsava.cz> Toshio Kuratomi <toshio@fedoraproject.org> Ville Skyttä <ville.skytta@iki.fi> - Rebuilt for timestamp .pyc invalidation mode - Don't RPM Provide pip - Remove a superfluous RPM Conflict with python-pip - Allows to install python3.12-pip together with python3-pip - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706) Resolves: RHEL-25737 - Fix Bash completion Resolves: RHEL-99083 - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Rob Crittenden <rcritten@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Thomas Spura <tomspur@fedoraproject.org> Tom spot Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim Gündüz <devrim@gunduz.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason Tibbitts <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Kubat <pkubat@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Todd Zullinger <tmz@fedoraproject.org> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@fedoraproject.org> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> Dennis Gilmore <dennis@ausil.us> Eric Smith <brouhaha@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Nathaniel McCallum <nathaniel@themccallums.org> Orion Poplawski <orion@cora.nwra.com> Rob Crittenden <rcritten@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jakub Čajka <jcajka@redhat.com> Jesse Keating <jkeating@fedoraproject.org> John Eckersberg <jeckersb@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lumir Balhar <lbalhar@redhat.com> Mamoru Tasaka <mtasaka@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Adam Williamson <awilliam@redhat.com> Arun SAG <sagarun@gmail.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jeremy Cline <jeremy@jcline.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Miro Hrončok <miro@hroncok.cz> Petr Viktorin <pviktori@redhat.com> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Rex Dieter <rdieter@math.unl.edu> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Tom Callaway <spot@fedoraproject.org> Toshio Kuratomi <toshio@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> yatinkarel <ykarel@redhat.com> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Antonio Trande <anto.trande@gmail.com> Bill Nottingham <notting@fedoraproject.org> Björn Esser <me@besser82.io> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> David Malcolm <dmalcolm@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> Elliott Sales de Andrade <quantum.analyst@gmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Jitka Plesnikova <jplesnik@redhat.com> Jonathan Wakely <jwakely@redhat.com> Jon Ciesla <limb@fedoraproject.org> Kalev Lember <klember@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mamoru TASAKA <mtasaka@fedoraproject.org> Marcel Plch <mplch@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@cora.nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomas Tomecek <ttomecek@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Rebuilt for timestamp .pyc invalidation mode - Initial package - Fedora contributions by: Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Haikel Guemar <hguemar@fedoraproject.org> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Konstantin Ryabitsev <icon@fedoraproject.org> Lumir Balhar <lbalhar@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Miro Hrončok <miro@hroncok.cz> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@cora.nwra.com> Petr Viktorin <pviktori@redhat.com> Pierre-Yves Chibon <pingou@pingoured.fr> Ralph Bean <rbean@redhat.com> Randy Barlow <randy@electronsweatshop.com> Robert Kuska <rkuska@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@redhat.com> Ville Skyttä <scop@fedoraproject.org> - Disable bootstrap - Rebuilt for timestamp .pyc invalidation mode - Security fix for CVE-2024-6345 Resolves: RHEL-49985 - Security fix for CVE-2025-47273 Resolves: RHEL-101118 - Security fix for CVE-2025-8194 Resolves: RHEL-106369 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-RHEL-193793 - Update to 3.12.12 Resolves: RHEL-125856 - Security fix for CVE-2025-12084 Resolves: RHEL-135399 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2025-13836 Resolves: RHEL-141026 - Release bump to correct the build for wrong release Related: RHEL-141026 - Security fixes for CVE-2026-0865, CVE-2025-15366, CVE-2025-15367 and CVE-2026-1299 Resolves: RHEL-143112 Resolves: RHEL-143172 Resolves: RHEL-144895 - Rebuilding previous fixes for different build target Related: RHEL-143112, RHEL-143172, RHEL-144895 - Security fix for CVE-2026-4519 Resolves: RHEL-158126 - Update to 3.12.13 - Security fixes for CVE-2025-6075, CVE-2025-13837, CVE-2025-15282, CVE-2025-59375, CVE-2026-0672 Related: RHEL-168159, RHEL-167917 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-6100, CVE-2026-2297, CVE-2026-3644, CVE-2026-4224 Resolves: RHEL-168159, RHEL-167917 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180474 - Security fix for CVE-2026-15308 Resolves: RHEL-193793 - Update to Python 3.12.14 Resolves: RHEL-227215 - Rebuilt for timestamp .pyc invalidation mode - Rebase to 1.26.19 to fix CVE-2024-37891 Resolves: RHEL-59998 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-139403 - Rebase to 1.26.19 to fix CVE-2024-37891 Resolves: RHEL-59998 - Security fix for CVE-2025-66471 - Security fix for CVE-2025-66418 - Security fix for CVE-2026-21441 Resolves: RHEL-142909, RHEL-139399, RHEL-142922 - Security fix for CVE-2026-44431 - Security fix for CVE-2026-44432 Resolves: RHEL-184901, RHEL-185126 - Security fix for CVE-2026-24049 Resolves: RHEL-143652 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haïkel Guémar <hguemar@fedoraproject.org> Iryna Shcherbina <ishcherb@redhat.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumír Balhar <lbalhar@redhat.com> Michal Schorm <mschorm@redhat.com> Miro Hrončok <mhroncok@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - Initial package - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Carl George <carl@george.computer> Damien Ciabrini <dciabrin@redhat.com> Haïkel Guémar <hguemar@fedoraproject.org> Iryna Shcherbina <ishcherb@redhat.com> Itamar Reis Peixoto <itamar@ispbrasil.com.br> Julien Enselme <jujens@jujens.eu> Lumír Balhar <lbalhar@redhat.com> Michal Schorm <mschorm@redhat.com> Miro Hrončok <mhroncok@redhat.com> Yaakov Selkowitz <yselkowi@redhat.com> - RHEL: Rename SPEC to python3.14-cffi.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Update to 2.0.0 - taken from Fedora 4e8a485 - Fix Py_XDECREF of an unitialized pointer - Resolves: RHEL-120834 - RHEL: Rename SPEC to python3.14-charset-normalizer.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating.yaml - Update to 3.4.4 - taken from Fedora cf7f8a9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Update to 41.0.7, fixes rhbz#2255351, CVE-2023-49083 - Bootstrap for Python 3.13 - Rebuilt for Python 3.13 - Update to 42.0.8, fixes rhbz#2251816 - RHEL: Rename SPEC to python3.14-cryptography.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Reuploaded sources - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - RHEL: Rename SPEC to python3.14-idna.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating.yaml - Update to 3.11 - taken from Fedora 9888320 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - RHEL: Rename SPEC to python3.14-lxml.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Change gating - Update to 6.0.2 - taken from Fedora 11da0f3 - Update of sources file while reuploading to centos lookaside cache - Fix a memory leak - Fix another memory leak - Fix memory leak when initDocDict() fails - Initial package Fedora contributions by: Adam Williamson <awilliam@redhat.com> Alexander Bokovoy <abokovoy@redhat.com> Bill Nottingham <notting@fedoraproject.org> Dan Callaghan <dcallagh@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> Igor Gnatenko <ignatenko@redhat.com> Iryna Shcherbina <ishcherb@redhat.com> Jakub Dorňák <jdornak@redhat.com> James Bowes <jbowes@redhat.com> 1.0-1 Jan Kaluza <jkaluza@redhat.com> Jesse Keating <jkeating@fedoraproject.org> Joe Orton <jorton@redhat.com> Josh Kayse <joshkayse@fedoraproject.org> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@fedoraproject.org> Luboš Uhliarik <luhliari@redhat.com> Luke Macken <lmacken@redhat.com> Matthias Runge <mrunge@redhat.com> Miro Hrončok <mhroncok@redhat.com> Orion Poplawski <orion@cora.nwra.com> Peter Robinson <pbrobinson@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Ricky Zhou <ricky@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Hrnciar <thrnciar@redhat.com> Tom Stellard <tstellar@redhat.com> Troy Dawson <tdawson@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Initial import - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lukáš Zaoral <lzaoral@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Songsong Zhang <u2fsdgvkx1@gmail.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Tulio Magno Quites Machado Filho <tuliom@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> - Initial import - Fedora contributions by: Benjamin A. Beasley <code@musicinmybrain.net> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> David Tardon <dtardon@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Elliott Sales de Andrade <quantum.analyst@gmail.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Iñaki Úcar <iucar@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jarod Wilson <jwilson@fedoraproject.org> Jaromir Capik <jcapik@redhat.com> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Lukáš Zaoral <lzaoral@redhat.com> Lumir Balhar <lbalhar@redhat.com> Merlin Mathesius <mmathesi@redhat.com> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@gmail.com> Robert Kuska <rkuska@redhat.com> Scott Talbert <swt@techie.net> Simone Caronni <negativo17@gmail.com> Songsong Zhang <u2fsdgvkx1@gmail.com> Thomas Spura <thomas.spura@gmail.com> Tomáš Hrnčiar <thrnciar@redhat.com> Tomas Orsava <torsava@redhat.com> Tomas Tomecek <ttomecek@redhat.com> Tulio Magno Quites Machado Filho <tuliom@redhat.com> Ville Skyttä <scop@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> - RHEL: Rename SPEC to python3.14-pip.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Gating - Update to 25.2 (rhbz#2385294) - Include SBOM in the .whl file in python-pip-wheel - Security fix for the bundled urllib3 for CVE-2025-50181 - RHEL: Rename SPEC to python3.14-pip.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Gating - Update to 25.2 (rhbz#2385294) - Include SBOM in the .whl file in python-pip-wheel - Security fix for the bundled urllib3 for CVE-2025-50181 - Security fix for CVE-2026-8643: path traversal in wheel entry points - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pip_install_upgrade to run pip-3.14 - fix bash completion + remove unused metadata file - RHEL: Rename SPEC to python3.14-pip.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Gating - Update to 25.2 (rhbz#2385294) - Include SBOM in the .whl file in python-pip-wheel - Security fix for the bundled urllib3 for CVE-2025-50181 - RHEL: Rename SPEC to python3.14-pip.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Gating - Update to 25.2 (rhbz#2385294) - Include SBOM in the .whl file in python-pip-wheel - Security fix for the bundled urllib3 for CVE-2025-50181 - Security fix for CVE-2026-8643: path traversal in wheel entry points - Fix gating plan - removed unnecessary older VERSION= tests - removed bootstrap test - fix pip_install_upgrade to run pip-3.14 - fix bash completion + remove unused metadata file - Initial package Fedora contributions by: Dennis Gilmore <dennis@ausil.us> Bill Nottingham <notting@fedoraproject.org> Charalampos Stratakis <cstratak@redhat.com> Christian Heimes <cheimes@redhat.com> David Malcolm <dmalcolm@redhat.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jesse Keating <jkeating@fedoraproject.org> Miro Hrončok <miro@hroncok.cz> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Rob Crittenden <rcritten@redhat.com> Robert Kuska <rkuska@redhat.com> Slavek Kabrda <bkabrda@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Thomas Spura <tomspur@fedoraproject.org> Tom Callaway <spot@fedoraproject.org> Troy Dawson <tdawson@redhat.com> - Update to the latest and last upstream commit - The project won't have any new releases - Use modern pyproject macros Related: RHEL-120845 - Initial package Fedora contributions by: Ales Nezbeda <anezbeda@redhat.com> Bill Nottingham <notting@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Devrim Gündüz <devrim@gunduz.org> Filip Januš <fjanus@redhat.com> Honza Horak <hhorak@redhat.com> Ignacio Vazquez-Abrams <ivazqueznet+rpm@gmail.com> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Jason L Tibbitts III <tibbs@math.uh.edu> Jesse Keating <jkeating@fedoraproject.org> Jozef Mlich <jmlich@redhat.com> Lumír Balhar <lbalhar@redhat.com> Miro Hrončok <mhroncok@redhat.com> Ondřej Sloup <ondrej.sloup@protonmail.com> Patrik Novotný <panovotn@redhat.com> Pavel Raiskup <praiskup@redhat.com> Petr Kubat <pkubat@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Todd Zullinger <tmz@pobox.com> Tomas Hrnciar <thrnciar@redhat.com> Tom Lane <tgl@redhat.com> - RHEL: Rename SPEC to python3.14-pycparser.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Keep the ply library bundled, as intended upstream - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating.yaml - New upstream release 6.0.3 - RHEL: Rename SPEC to python3.14-idna.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Initial package - Fedora contributions by: Antonio Trande <anto.trande@gmail.com> Benjamin A. Beasley <code@musicinmybrain.net> Bill Nottingham <notting@fedoraproject.org> Björn Esser <me@besser82.io> Charalampos Stratakis <cstratak@redhat.com> Christian Dersch <lupinix@mailbox.org> David Abdurachmanov <davidlt@rivosinc.com> David Malcolm <dmalcolm@redhat.com> Deji Akingunola <deji@fedoraproject.org> Dennis Gilmore <dennis@ausil.us> dmalcolm <dmalcolm@fedoraproject.org> Elliott Sales de Andrade <quantum.analyst@gmail.com> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <gwync@protonmail.com> Ignacio Vazquez-Abrams <ivazquez@fedoraproject.org> Igor Gnatenko <ignatenko@redhat.com> Iñaki Úcar <iucar@fedoraproject.org> Jef Spaleta <jspaleta@fedoraproject.org> Jerry James <loganjerry@gmail.com> Jesse Keating <jkeating@fedoraproject.org> Jitka Plesnikova <jplesnik@redhat.com> Jonathan Wakely <jwakely@redhat.com> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Kevin Fenzi <kevin@scrye.com> Lumir Balhar <lbalhar@redhat.com> Mamoru TASAKA <mtasaka@fedoraproject.org> Marcel Plch <mplch@redhat.com> Maxwell G <maxwell@gtmx.me> Miro Hrončok <miro@hroncok.cz> Nikola Forró <nforro@redhat.com> Nils Philippsen <nils@redhat.com> Orion Poplawski <orion@nwra.com> Pavel Šimovec <psimovec@redhat.com> Peter Robinson <pbrobinson@fedoraproject.org> Petr Viktorin <pviktori@redhat.com> Robert Kuska <rkuska@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Tomas Tomecek <ttomecek@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> Troy Dawson <tdawson@fedoraproject.org> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Rebuild with newer Cython - Fix issues uncovered via coverity scanning Related: RHEL-120852 - Additional coverity fixes Related: RHEL-120852 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Initial package - Fedora contributions by: Björn Esser <besser82@fedoraproject.org> Bohuslav Kabrda <bkabrda@redhat.com> Charalampos Stratakis <cstratak@redhat.com> Dan Horák <dan@danny.cz> David Malcolm <dmalcolm@redhat.com> Dennis Gilmore <dennis@ausil.us> Florian Weimer <fweimer@redhat.com> Gwyn Ciesla <limb@fedoraproject.org> Igor Gnatenko <ignatenkobrain@fedoraproject.org> Iryna Shcherbina <shcherbina.iryna@gmail.com> Jaroslav Škarvada <jskarvad@redhat.com> Jason ティビツ <tibbs@fedoraproject.org> Kalev Lember <klember@redhat.com> Karolina Surma <ksurma@redhat.com> Karsten Hopp <karsten@redhat.com> Lukáš Zachar <lzachar@redhat.com> Lumir Balhar <lbalhar@redhat.com> Marcel Plch <mplch@redhat.com> Matej Stuchlik <mstuchli@redhat.com> Michal Cyprian <mcyprian@redhat.com> Michal Toman <mtoman@fedoraproject.org> Miro Hrončok <mhroncok@redhat.com> Nicolas Chauvet <kwizart@gmail.com> Orion Poplawski <orion@cora.nwra.com> Patrik Kopkan <pkopkan@redhat.com> Peter Robinson <pbrobinson@gmail.com> Petr Šplíchal <psplicha@redhat.com> Petr Viktorin <pviktori@redhat.com> Rex Dieter <rdieter@fedoraproject.org> Richard W.M. Jones <rjones@redhat.com> Robert Kuska <rkuska@redhat.com> Sahana Prasad <sahana@redhat.com> Stephen Gallagher <sgallagh@redhat.com> Than Ngo <than@redhat.com> Thomas Spura <thomas.spura@gmail.com> Till Maas <opensource@till.name> Tom Stellard <tstellar@redhat.com> Tomas Mraz <tmraz@fedoraproject.org> Tomas Orsava <torsava@redhat.com> Tomas Radej <tradej@redhat.com> Tomáš Hrnčiar <thrnciar@redhat.com> Toshio Kuratomi <toshio@fedoraproject.org> U2FsdGVkX1 <U2FsdGVkX1@gmail.com> Victor Stinner <vstinner@redhat.com> Ville Skyttä <ville.skytta@iki.fi> Yaakov Selkowitz <yselkowi@redhat.com> Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - Disable bootstrap - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.1 - Update to Python 3.14.2 - Support OpenSSL FIPS mode - Disable the builtin hashlib hashes except blake2 Related: RHEL-120823 - Update to Python 3.14.3 - Security fixes for CVE-2025-11468, CVE-2026-0672, CVE-2026-0865, CVE-2025-15282, CVE-2026-1299, CVE-2025-15366, CVE-2025-15367 Resolves: RHEL-144896, RHEL-143115, RHEL-143173 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-4519 Resolves: RHEL-158115 - Update to Python 3.14.4 - Security fixes for CVE-2026-2297, CVE-2026-3644, CVE-2026-4224, CVE-2026-0865 Related: RHEL-167918, RHEL-168160 - Security fixes for CVE-2026-1502, CVE-2026-4786, CVE-2026-5713, CVE-2026-6100 Resolves: RHEL-167918, RHEL-168160 - Depend on sqlite-libs with (de)serialize API Resolves: RHEL-180476 - Update to 3.14.5rc1 - Move back to the generational from the incremental garbage collector - Security fix for CVE-2026-6019 Resolves: RHEL-180642 - Update to 3.14.5 Resolves: RHEL-180642 - Security fix for CVE-2026-15308 Resolves: RHEL-193779 - Update to Python 3.14.6 Related: RHEL-227218 - Update to Python 3.14.7, security fix for CVE-2026-11940 Resolves: RHEL-227218 - On RHEL 9, also supports reparse deferral in expat Related: RHEL-227218 - RHEL: Rename SPEC to python3.14-urllib3.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Update to 2.6.1 - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37 - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53 - Update to 2.6.2 - Update to 2.6.3 - Fixes CVE-2026-21441 / GHSA-38jv-5279-wg99 - RHEL: Rename SPEC to python3.14-urllib3.spec - Convert from Fedora for the Python 3.14 stack in RHEL - Add gating - Update to 2.6.1 - Fixes CVE-2025-66471 / GHSA-2xpw-w6gg-jr37 - Fixes CVE-2025-66418 / GHSA-gm62-xv2j-4w53 - Update to 2.6.2 - Update to 2.6.3 - Fixes CVE-2026-21441 / GHSA-38jv-5279-wg99 - Security fix for CVE-2026-44431 and CVE-2026-44432 - Resolves: RHEL-184902 - Resolves: RHEL-185127 - updated to 2.5.0 (RHEL-23692) - add runtime dependency for EBCDIC to ASCII conversion (RHEL-24407) - Resolves: RHEL-23692 RHEL-24407 - updated to 2.5.1 (RHEL-73365) - Resolves: RHEL-73365 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534] - Resolves: RHEL-164534 (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z]) - kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008] - kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008] - kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008] - Resolves: RHEL-166008 (live migration failed the VM just register key only [rhel-9.8.z]) - kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951] - kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951] - Resolves: RHEL-184951 (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z]) - kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527] - Resolves: RHEL-184527 (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z]) - kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387] - kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387] - kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387] - Resolves: RHEL-207387 (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144] - kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193] - kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193] - kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193] - kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193] - kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193] - kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193] - kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193] - kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193] - kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193] - kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193] - kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193] - kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193] - kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193] - kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193] - kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193] - kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193] - kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193] - kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193] - kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193] - kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193] - kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193] - kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193] - kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193] - kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193] - Resolves: RHEL-131144 (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8]) - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193] - Resolves: RHEL-132193 ([rhel 9.8]L1VH qemu downstream initial merge RHEL9) - kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240] - Resolves: RHEL-138240 (QEMU crashes when stopping source VM during live migration [rhel-9]) - kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989] - kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989] - kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989] - kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989] - kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187] - kvm-q35-increase-default-tseg-size.patch [RHEL-139057] - Resolves: RHEL-132989 (Expose block limits of block nodes in QMP and qemu-img [rhel-9]) - Resolves: RHEL-140187 (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8]) - Resolves: RHEL-139057 ([qemu, rhel-9] increase default TSEG size) - kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422] - kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620] - Resolves: RHEL-147422 (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts) - Resolves: RHEL-130620 (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9]) - kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115] - kvm-curl-Fix-coroutine-waking.patch [RHEL-67115] - kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115] - kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115] - kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115] - Resolves: RHEL-67115 ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6]) - kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396] - kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396] - kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396] - kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396] - Resolves: RHEL-149396 (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9]) - kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679] - Resolves: RHEL-151679 ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting) - kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948] - kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174] - kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174] - kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174] - kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174] - Resolves: RHEL-155947 (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8]) - Resolves: RHEL-155948 (Mirror job can miss writes during startup, corrupting the copy [rhel-9]) - Resolves: RHEL-154174 (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8]) - Enable building for ppc64le - Don't remove slof.bin for ppc64le - usb: add config options for hub and hid devices for ppc - Remove pnv_chip_find_core calls from SPRD helpers - Remove pre-3.0 migration from spapr_compat_rhel7_6 - Sync with Fedora - update to 0.7.1 Resolves: bz#1951151 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 0.8.0 Resolves: bz#1968290 - 0.8.4 (sync with Fedora) Resolves: bz#2041342 - Rebuild (Qt 5.15.3) Resolves: bz#2061415 - 0.9.0 Resolves: bz#2175753 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1932052 - qpdf-10.2.0 is available - 1935799 - qpdf-10.3.0 is available - 1937988 - qpdf-10.3.1 is available - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - 1950033 - Possible changes in zlib output causes FTBFS for qpdf - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095993 - Move qpdf to CRB repository - 2106940 - FIPS breaks pdftopdf and bannertopdf - 2157765 - Ship qpdf-devel in CRB - Add support for building upstream tests for gating Resolves: bz#1969433 - Let qt5_install_tests macro to handle mangling python shebangs Resolves: bz#1969433 - Handle additional spaces python shebangs Resolves: bz#1969433 - Use more precise regular expression for python shebangs Resolves: bz#1969433 - Use more robust regular expressions Resolves: bz#1969433 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061352 - 5.15.9 Resolves: bz#2175724 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup Resolves: RHEL-104999 - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices Resolves: RHEL-105004 - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120985 - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup Resolves: RHEL-104999 - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices Resolves: RHEL-105004 - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120985 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup Resolves: RHEL-104999 - Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices Resolves: RHEL-105004 - Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile Resolves: RHEL-120985 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Fix infinite loops in QXmlStreamReader (CVE-2023-38197) Resolves: bz#2222771 - Fix incorrect integer overflow check in HTTP2 implementation Resolves: RHEL-20239 - Fix CVE-2024-25580: potential buffer overflow when reading KTX images Resolves: RHEL-25726 - HTTP2: Delay any communication until encrypted() can be responded to Resolves: RHEL-46351 - qt5: QtCore Assertion Failure Denial of Service Resolves: RHEL-96231 - Add gating tests Resolves: bz#1968461 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061357 - 5.15.9 Resolves: bz#2175730 - Rebuild (elfutils#2188064) Resolves: bz#2175730 - Add gating tests Resolves: bz#1968461 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061357 - 5.15.9 Resolves: bz#2175730 - Rebuild (elfutils#2188064) Resolves: bz#2175730 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968461 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061357 - 5.15.9 Resolves: bz#2175730 - Rebuild (elfutils#2188064) Resolves: bz#2175730 - Add gating tests Resolves: bz#1968462 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968462 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with Fedora: - sync kde/5.15 branch fixes - pull in candidate fix QTBUG-83890 Resolves: bz#1988934 - Sync with Fedora Resolves: bz#2025420 - 5.15.3 + sync with Fedora Resolves: bz#2061355 - 5.15.9 + sync with Fedora Resolves: bz#2178624 Resolves: bz#2175728 - Disable tests failing in gating Resolves: bz#2175728 - Rebuild (elfutils#2188064) Resolves: bz#2175728 - Add gating tests Resolves: bz#1968462 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968462 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with Fedora: - sync kde/5.15 branch fixes - pull in candidate fix QTBUG-83890 Resolves: bz#1988934 - Sync with Fedora Resolves: bz#2025420 - 5.15.3 + sync with Fedora Resolves: bz#2061355 - 5.15.9 + sync with Fedora Resolves: bz#2178624 Resolves: bz#2175728 - Disable tests failing in gating Resolves: bz#2175728 - Rebuild (elfutils#2188064) Resolves: bz#2175728 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968462 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968462 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with Fedora: - sync kde/5.15 branch fixes - pull in candidate fix QTBUG-83890 Resolves: bz#1988934 - Sync with Fedora Resolves: bz#2025420 - 5.15.3 + sync with Fedora Resolves: bz#2061355 - 5.15.9 + sync with Fedora Resolves: bz#2178624 Resolves: bz#2175728 - Disable tests failing in gating Resolves: bz#2175728 - Rebuild (elfutils#2188064) Resolves: bz#2175728 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061358 - Bump build to build against correct Qt version Resolves: bz#2061358 - 5.15.9 Resolves: bz#2175731 - Add gating tests Resolves: bz#1968464 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061359 - 5.15.9 Resolves: bz#2175733 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968465 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061360 - 5.15.9 Resolves: bz#2175734 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968466 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061361 - 5.15.9 Resolves: bz#2175735 - Add gating tests Resolves: bz#1968466 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061361 - 5.15.9 Resolves: bz#2175735 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968466 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061361 - 5.15.9 Resolves: bz#2175735 - Add gating tests Resolves: bz#1968467 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968467 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061361 - 5.15.9 Resolves: bz#2175736 - Add gating tests Resolves: bz#1968467 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968467 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061361 - 5.15.9 Resolves: bz#2175736 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968467 - Let qt5_install_tests macro handle mangling python shebangs Resolves: bz#1968467 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061361 - 5.15.9 Resolves: bz#2175736 - Add gating tests Resolves: bz#1968468 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061363 - 5.15.9 Resolves: bz#2175737 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968468 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061363 - 5.15.9 Resolves: bz#2175737 - Add gating tests Resolves: bz#1968469 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (move -devel subpkg to AppStream) Resolves: bz#2028779 - 5.15.3 Resolves: bz#2061364 - 5.15.9 Resolves: bz#2175738 - Add gating tests Resolves: bz#1968469 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (move -devel subpkg to AppStream) Resolves: bz#2028779 - 5.15.3 Resolves: bz#2061364 - 5.15.9 Resolves: bz#2175738 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968469 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild (move -devel subpkg to AppStream) Resolves: bz#2028779 - 5.15.3 Resolves: bz#2061364 - 5.15.9 Resolves: bz#2175738 - Add gating tests Resolves: bz#1968470 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061365 - 5.15.9 Resolves: bz#2175745 - Add gating tests Resolves: bz#1968470 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061365 - 5.15.9 Resolves: bz#2175745 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968470 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061365 - 5.15.9 Resolves: bz#2175745 - Add gating tests Resolves: bz#1968471 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with Fedora - add recommends: iio-sensor-proxy Resolves: bz#1971438 - 5.15.3 Resolves: bz#2061366 - 5.15.9 Resolves: bz#2175739 - Add gating tests Resolves: bz#1968471 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with Fedora - add recommends: iio-sensor-proxy Resolves: bz#1971438 - 5.15.3 Resolves: bz#2061366 - 5.15.9 Resolves: bz#2175739 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968471 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Sync with Fedora - add recommends: iio-sensor-proxy Resolves: bz#1971438 - 5.15.3 Resolves: bz#2061366 - 5.15.9 Resolves: bz#2175739 - Add gating tests Resolves: bz#1968472 - Properly build unit tests Resolves: bz#1968472 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to include -devel subpkg in AppStream Resolves: bz#2028567 - 5.15.3 Resolves: bz#2061367 - 5.15.9 Resolves: bz#2175740 - Add gating tests Resolves: bz#1968472 - Properly build unit tests Resolves: bz#1968472 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to include -devel subpkg in AppStream Resolves: bz#2028567 - 5.15.3 Resolves: bz#2061367 - 5.15.9 Resolves: bz#2175740 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968472 - Properly build unit tests Resolves: bz#1968472 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild to include -devel subpkg in AppStream Resolves: bz#2028567 - 5.15.3 Resolves: bz#2061367 - 5.15.9 Resolves: bz#2175740 - Add gating tests Resolves: bz#1968473 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061368 - 5.15.9 Resolves: bz#2175741 - Add gating tests Resolves: bz#1968473 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061368 - 5.15.9 Resolves: bz#2175741 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968473 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061368 - 5.15.9 Resolves: bz#2175741 - Add gating tests Resolves: bz#1968474 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix out-of-bound write that may lead to DoS Resolves: bz#2038488 - 5.15.3 Resolves: bz#2061369 - 5.15.9 Resolves: bz#2175742 - Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) Resolves: bz#2208140 - Add gating tests Resolves: bz#1968474 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix out-of-bound write that may lead to DoS Resolves: bz#2038488 - 5.15.3 Resolves: bz#2061369 - 5.15.9 Resolves: bz#2175742 - Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) Resolves: bz#2208140 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968474 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix out-of-bound write that may lead to DoS Resolves: bz#2038488 - 5.15.3 Resolves: bz#2061369 - 5.15.9 Resolves: bz#2175742 - Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573) Resolves: bz#2208140 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuild (LLVM-18) Resolves: RHEL-28681 - Rebuild (LLVM-19) Resolves: RHEL-66115 - Rebuild (LLVM-20) Resolves: RHEL-81777 - Rebuild (LLVM-21) Resolves: RHEL-108348 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061371 - 5.15.9 Resolves: bz#2175744 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Client: expose toplevel window state (change from Qt6) Resolves: bz#1968292 - Sync with Fedora Resolves: bz#2003935 - Sync with Fedora Resolves: bz#2012714 - Drop BR: tree Resolves: bz#2014080 - Sync with Fedora Resolves: bz#2028778 - Sync with Fedora Resolves: bz#2044169 - Sync with Fedora Resolves: bz#2051384 - 5.15.3 Resolves: bz#2061372 - 5.15.9 Resolves: bz#2175746 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Client: expose toplevel window state (change from Qt6) Resolves: bz#1968292 - Sync with Fedora Resolves: bz#2003935 - Sync with Fedora Resolves: bz#2012714 - Drop BR: tree Resolves: bz#2014080 - Sync with Fedora Resolves: bz#2028778 - Sync with Fedora Resolves: bz#2044169 - Sync with Fedora Resolves: bz#2051384 - 5.15.3 Resolves: bz#2061372 - 5.15.9 Resolves: bz#2175746 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Client: expose toplevel window state (change from Qt6) Resolves: bz#1968292 - Sync with Fedora Resolves: bz#2003935 - Sync with Fedora Resolves: bz#2012714 - Drop BR: tree Resolves: bz#2014080 - Sync with Fedora Resolves: bz#2028778 - Sync with Fedora Resolves: bz#2044169 - Sync with Fedora Resolves: bz#2051384 - 5.15.3 Resolves: bz#2061372 - 5.15.9 Resolves: bz#2175746 - Add gating tests Resolves: bz#1968478 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061373 - 5.15.9 Resolves: bz#2175747 - Add gating tests Resolves: bz#1968478 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061373 - 5.15.9 Resolves: bz#2175747 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968478 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061373 - 5.15.9 Resolves: bz#2175747 - Add gating tests Resolves: bz#1968479 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061374 - 5.15.9 Resolves: bz#2175749 - Move QML imports out of -devel subpackage Resolves: bz#2175749 - Add gating tests Resolves: bz#1968479 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061374 - 5.15.9 Resolves: bz#2175749 - Move QML imports out of -devel subpackage Resolves: bz#2175749 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968479 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061374 - 5.15.9 Resolves: bz#2175749 - Move QML imports out of -devel subpackage Resolves: bz#2175749 - Add gating tests Resolves: bz#1968481 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061375 - 5.15.9 Resolves: bz#2175750 - Add gating tests Resolves: bz#1968481 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061375 - 5.15.9 Resolves: bz#2175750 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968480 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061376 - 5.15.9 Resolves: bz#2175751 - Rebuild (elfutils#2188064) Resolves: bz#2175751 - Add gating tests Resolves: bz#1968480 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061376 - 5.15.9 Resolves: bz#2175751 - Rebuild (elfutils#2188064) Resolves: bz#2175751 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061353 - 5.15.9 Resolves: bz#2175726 - Add gating tests Resolves: bz#1968480 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061376 - 5.15.9 Resolves: bz#2175751 - Rebuild (elfutils#2188064) Resolves: bz#2175751 - Add support for building upstream tests for gating Resolves: bz#1969433 - Let qt5_install_tests macro to handle mangling python shebangs Resolves: bz#1969433 - Handle additional spaces python shebangs Resolves: bz#1969433 - Use more precise regular expression for python shebangs Resolves: bz#1969433 - Use more robust regular expressions Resolves: bz#1969433 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061352 - 5.15.9 Resolves: bz#2175724 - Add support for building upstream tests for gating Resolves: bz#1969433 - Let qt5_install_tests macro to handle mangling python shebangs Resolves: bz#1969433 - Handle additional spaces python shebangs Resolves: bz#1969433 - Use more precise regular expression for python shebangs Resolves: bz#1969433 - Use more robust regular expressions Resolves: bz#1969433 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 5.15.3 Resolves: bz#2061352 - 5.15.9 Resolves: bz#2175724 - Update to new upstream version - Add tmpfs quota support - Remove rhel-only patches that were merged upstream - Fix regression - Related: RHEL-50644 - Fix memory leak - Related: RHEL-50914 - Fix patch application - Related: RHEL-50914 - Update to new upstream version - Add tmpfs quota support - Remove rhel-only patches that were merged upstream - Fix regression - Related: RHEL-50644 - Fix memory leak - Related: RHEL-50914 - Fix patch application - Related: RHEL-50914 - Update to new upstream version - Add tmpfs quota support - Remove rhel-only patches that were merged upstream - Fix regression - Related: RHEL-50644 - Fix memory leak - Related: RHEL-50914 - Fix patch application - Related: RHEL-50914 - Update to new upstream version - Add tmpfs quota support - Remove rhel-only patches that were merged upstream - Fix regression - Related: RHEL-50644 - Fix memory leak - Related: RHEL-50914 - Fix patch application - Related: RHEL-50914 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Use systemd-sysusers for radvd user and group (#2095457) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Install pkg-config and cmake files to arched location - Build documentation as noarch - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add patch for C++20 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove gtest dependency and turn off tests Resolves: #1977656 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Install pkg-config and cmake files to arched location - Build documentation as noarch - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add patch for C++20 support - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Remove gtest dependency and turn off tests Resolves: #1977656 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: CVE-2024-57823 integer underflow when normalizing a URI with the turtle parser - Bump NVR - Rebuild for mpfr 4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - BR: libgcrypt-devel, enforce use of non-bundled crypto digest implementations (RHBZ #1099251) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to upstream release v51.0 - Resolves: RHEL-24473, RHEL-23180 - Rebase to upstream release v54.0 - Resolves: RHEL-52886, RHEL-54647, RHEL-51876 - Fix data corruption in bnxt_re - Resolves: RHEL-89179 - Rebase to upstream release v57.0 - Resolves: RHEL-76570, RHEL-45644, RHEL-72077, RHEL-68506, RHEL-94449 - Fix pyverbs tests - Resolves: RHEL-107929, RHEL-107930 - Rebase to upstream release v60.0 - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-100679, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - bump release to rebuild in sidetag - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebase to upstream release v61.0 - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebuilt for gating testing - Resolves: RHEL-98270, RHEL-97696, RHEL-97692, RHEL-97648, RHEL-95331 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to readline-8.1 Resolves: #1904867 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Support saving and restoring hybrid BIOS/UEFI bootloader, PRs 3145 3136 - make initrd accessible only by root (CVE-2024-23301), PR 3123 - Do not delete NetBackup logs in case of errors and save /usr/openv/netbackup/logs to the restored system after a successful recovery - Add /usr/openv/var to COPY_AS_IS_NBU, fixes an issue seen with NetBackup 10.2.0.1 - Resolve libs for executable links in COPY_AS_IS, PR 3073 - Skip invalid disk drives when saving layout PR 3047 - Support "export TMPDIR" in user configuration again, print a warning when this is used - revert commit f464eae2, adapt PR 3163, add commit b422845f. Will be supported only until the update to 2.7 - Backport PR 3250 to fix useless warning that libsystemd-core requires additional libraries and ReaR recovery system needs additional libraries - Backport PR 3242 to fix IPv6 address in nfs:// and sshfs:// BACKUP/OUTPUT_URL - Backport PR 2576 to remove obsolete FAT16 options to avoid kernel warning - Install GRUB on multipath disks, PR 3334 - Improve docs of layout configuration in user guide, PR 3125 - add dependency on grub2-tools-extra and GRUB EFI modules on EFI machines - add dependency on syslinux-extlinux on x86 - add initial support for aarch64 machines with UEFI - enhance the 300_map_disks.sh script to also print the disk sizes - support generation of ed25519 SSH host keys in the rescue image - create sshd home directory in the rescue image on systems upgraded from EL8 - fix recovery of LUKS encrypted systems with multiple keyslots - fix PPC PReP Boot detection on GPT layouts - skip longhorn iscsi devices in disklayout.conf - error out if any unsupported OUTPUT used on s390x - use git to apply downstream patches - copy an sshd helper to the rescue ramdisk (RHEL-146037) - fix support for PowerNV machines without PPC PReP partitions (RHEL-134217) - add support for dbus broker (RHEL-31749) - abort when sourcing fails due to a syntax error (RHEL-104289) - fix recreation of multi-disk volume groups in migration mode (RHEL-23887) - skip unsupported partition tables (RHEL-78583) - do not attempt to use the disk with backup for recovery (RHEL-111612) - Drop duplicate font files. - Correct broken font metadata in fontconfig. - Drop Italic variant of the variable fonts to workaround unexpected italic rendering and crash. Resolves: RHEL-1617 - Drop duplicate font files. - Correct broken font metadata in fontconfig. - Drop Italic variant of the variable fonts to workaround unexpected italic rendering and crash. Resolves: RHEL-1617 - Enable PIC mode for assembler files (RHEL-6298) - Fix the fix for brp-llvm-compile-lto-elf - Use correct format specifier in brp-llvm-compile-lto-elf - brp-python-bytecompile: Pass --invalidation-mode=timestamp to compileall - Resolves: RHEL-22139 - brp-mangle-shebangs: Strip env flags when mangling shebangs (RHEL-26961) - Fix automatic soname requires on non-versioned symlink targets (RHEL-28767) - Add java_arches macro - Use Fat LTO with Clang - Fix AlmaLinux detection - Drop duplicate font files. - Correct broken font metadata in fontconfig. - Drop Italic variant of the variable fonts to workaround unexpected italic rendering and crash. Resolves: RHEL-1617 - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.22 for CVE-2026-25243 - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.14 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.22 for CVE-2026-25243 - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.14 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.16 RHEL-26627 - rebase to 6.2.17 for CVE-2024-46981 - rebase to 6.2.18 for CVE-2025-21605 - rebase to 6.2.19 for CVE-2025-32023 and CVE-2025-48367 - fix ownership of /usr/lib64/redis RHEL-6784 - rebase to 6.2.20 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 6.2.22 for CVE-2026-25243 - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.6 RHEL-26628 - rebase to 7.2.7 for CVE-2024-46981 and CVE-2024-51741 - rebase to 7.2.8 for CVE-2025-21605 - rebase to 7.2.10 for CVE-2025-27151 CVE-2025-32023 and CVE-2025-48367 - rebase to 7.2.11 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - add sysusers.d file for user management - add tmpfiles.d file for temporary dir management - rebase to 7.2.14 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix FTBFS in ELN - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebuild for libpq ABI fix rhbz#1908268 - reduce rhel dependencies to what's needed - rhbz#1936659 rhel redland uses deprecated SHA-1 algorithm by default - rhbz#1936659 disable rhel redland digests and stub deprecated librdf_uri_get_digest - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - rhbz#1952816 rdfproc: Failed to open hashes storage - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Update Java source/target to 1.8 - Install license files in licensedir instead of docdir - Ship rest-devel in CRB Resolves: RHEL-122661 - Resolves: RHEL-129416 : aide - cannot manage rhel9.7/10.1 or earlier - unexpected character - line database=file - Resolves: RHEL-136599 : ha_cluster - feat: add support for fencing-watchdog-timeout - remove hpc role - Resolves: RHEL-144588 : Templates in some role license files [rhel-9] - Resolves: RHEL-144589 : ha_cluster - ha_cluster role does not work in container builds [rhel-9] - Resolves: RHEL-144592 : metrics - [RFE] configure TLS certificates in grafana using the metrics system role [rhel-9] - Resolves: RHEL-138279 : ssh - feat: Add new configuration option VersionAddendum [rhel-9] - Resolves: RHEL-144496 : sshd - feat: New OpenSSH configuration option GSSAPIDelegateCredentials [rhel-9] - Resolves: RHEL-138058 : storage - [RHEL10.2] in _get_device_id IndexError: list index out of range [rhel-9] - All roles support INJECT_FACTS_AS_VARS=false - metrics - test: do not restore service if final state not-found - sshd - feat: Add systemd ephemeral authorized_keys to the instantiated service file on Fedora - storage - fix: add vdo package for Fedora OSTree - Resolves: RHEL-144588 : Templates in some role license files - Fix ansible-test issue with community.general.ini_file module 11.4.4 in documentation string - Resolves: RHEL-122958 : postgresql - add PostgreSQL 18 - fix upstream shellcheck issue in nbde_client role - Resolves: RHEL-122958 : postgresql - add PostgreSQL 18 - fixes test issue - Resolves: RHEL-147822 : snapshot - Snapshot role ignores snapshot_lvm_bootable: true setting when creating a snapset [rhel-9] - Resolves: RHEL-147823 : storage - [RHEL10.2] ZeroDivisionError when creating LVM volume without size specification [rhel-9] - Resolves: RHEL-145215 : selinux - Missing proto 'sctp' and 'dccp' - Resolves: RHEL-145220 : vpn - [ERROR]: Task failed: object of type 'dict' has no attribute '1.1.1.1' - Resolves: RHEL-145215 : selinux - Missing proto 'sctp' and 'dccp' - timesync - fix: use ansible_facts timesync_ntp_provider_current - Resolves: RHEL-150782 : firewall - fix: el7 interface functionality requires NetworkManager [rhel-9] - Resolves: RHEL-145248 : selinux - [v 1.10.4] Prepare module installation -> "Template error: object of type 'dict' has no attribute 'path'" [rhel-9] - ha_cluster - fix: ostree - add dnf/dnf5 package, add firewall packages - metrics - test: ostree - add package pcp-pmda-apache, role certificate - systemd - test: ostree requires cronie package for testing - Resolves: RHEL-150782 : firewall - fix: el7 interface functionality requires NetworkManager - firewall - test: ensure interface chosen is managed by NetworkManager - Resolves: RHEL-151438 : storage - fix: ensure libblockdev-loop package on EL7 for loop mounts - Add fix to avoid using deprecated sosreport command. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Improve newly added %patch warning/error messages (RHEL-6294) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Improve newly added %patch warning/error messages (RHEL-6294) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Improve newly added %patch warning/error messages (RHEL-6294) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Improve newly added %patch warning/error messages (RHEL-6294) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Allow for no MPI_PYTHON{2}_SITEARCH - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix left-over argument shift in mpi.prov and mpi.req (#1930096) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Sync with latest Fedora repo - Resolves: rhbz#1972736 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 2025.7 Resolves: #RHEL-85392 - Backport https://github.com/coreos/rpm-ostree/pull/5351 Resolves: #RHEL-85684 - Rebase to 2025.8 Resolves: #RHEL-90254 - Move `ostree container` to bootc Resolves: #RHEL-72863 - Rebase to 2025.9 Resolves: #RHEL-103135 - Rebase to 2025.10 Resolves: #RHEL-106848 - Rebase to 2025.11 Resolves: #RHEL-113381 - Rebase to 2026.1 Resolves: RHEL-143217 Resolves: RHEL-143210 - Revert conditional change for ostree_ext Resolves: RHEL-144611 - Backport https://github.com/coreos/rpm-ostree/pull/5558 Resolves: RHEL-147222 - Move `ostree container` to bootc Resolves: #RHEL-72863 - Rebase to 2025.9 Resolves: #RHEL-103135 - Rebase to 2025.10 Resolves: #RHEL-106848 - Rebase to 2025.11 Resolves: #RHEL-113381 - Rebase to 2026.1 Resolves: RHEL-143217 Resolves: RHEL-143210 - Revert conditional change for ostree_ext Resolves: RHEL-144611 - Backport https://github.com/coreos/rpm-ostree/pull/5558 Resolves: RHEL-147222 - Backport https://github.com/coreos/rpm-ostree/pull/5569 Resolves: RHEL-154808 - Rebuilt for RHEL 9.8 Resolves: RHEL-154807 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 Resolves: RHEL-154807 - Rebase to 2025.7 Resolves: #RHEL-85392 - Backport https://github.com/coreos/rpm-ostree/pull/5351 Resolves: #RHEL-85684 - Rebase to 2025.8 Resolves: #RHEL-90254 - Move `ostree container` to bootc Resolves: #RHEL-72863 - Rebase to 2025.9 Resolves: #RHEL-103135 - Rebase to 2025.10 Resolves: #RHEL-106848 - Rebase to 2025.11 Resolves: #RHEL-113381 - Rebase to 2026.1 Resolves: RHEL-143217 Resolves: RHEL-143210 - Revert conditional change for ostree_ext Resolves: RHEL-144611 - Backport https://github.com/coreos/rpm-ostree/pull/5558 Resolves: RHEL-147222 - Move `ostree container` to bootc Resolves: #RHEL-72863 - Rebase to 2025.9 Resolves: #RHEL-103135 - Rebase to 2025.10 Resolves: #RHEL-106848 - Rebase to 2025.11 Resolves: #RHEL-113381 - Rebase to 2026.1 Resolves: RHEL-143217 Resolves: RHEL-143210 - Revert conditional change for ostree_ext Resolves: RHEL-144611 - Backport https://github.com/coreos/rpm-ostree/pull/5558 Resolves: RHEL-147222 - Backport https://github.com/coreos/rpm-ostree/pull/5569 Resolves: RHEL-154808 - Rebuilt for RHEL 9.8 Resolves: RHEL-154807 - Backport: https://github.com/coreos/rpm-ostree/pull/5575 Resolves: RHEL-154807 - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Improve newly added %patch warning/error messages (RHEL-6294) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Improve newly added %patch warning/error messages (RHEL-6294) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Improve newly added %patch warning/error messages (RHEL-6294) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Fix potential use of uninitialized pipe array (RHEL-22604) - Fix potential use of uninitialized pgp struct (RHEL-22605) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Add SourceLicense tag to spec syntax (RHEL-28798) - Talk about rpmsign in the rpmsign(8) man page (RHEL-40895) - Revert incorrect fix for false array overrun (RHEL-22607) - Fix root relocation regression (RHEL-28967) - Don't confuse OpenScanHub with false array overrun (RHEL-22607) - Fix discarded const qualifier in previous patch (RHEL-22607) - Fix %patch N applying Patch0 implicitly (RHEL-6294) - Issue deprecation warning for number-less %patch (RHEL-6294) - Improve newly added %patch warning/error messages (RHEL-6294) - Allow parametric macros to opt out of option processing (RHEL-67161) - Report unsafe symlinks during installation as a specific case (RHEL-33393) - Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070) - Add support for spec local file attributes and generators (RHEL-52772) - Store configurable digest(s) on packages in rpmdb (RHEL-35619) - Fix a hard link race condition in brp-strip (RHEL-74011) - Allow an optional "override clock" for deterministic timestamps (RHEL-106672) - Improve error handling on keystore load (RHEL-114837) - Sort files before passing to file attr dependency generators (RHEL-95376) - Update to 9.1 - Update to 9.2 - Update to 9.3 - Force legacy datestamp by default until rhbz#1715412 is resolved - Replace requests-download dependency with requests - spectool: Download text as text - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Drop progressbar2 dependency and bundle a tiny replacement (#1927784) - Drop fakeroot dependency and qa-robot scripts (#1905465) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 9.5 (#2005756) - Don't use the %python_sitelib macro, because it errors - See https://fedoraproject.org/wiki/Changes/PythonMacroError - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Filter out empty REQUESTED files in pip installed Python metadata dist-info dirs - Filter out empty py.typed files in Python site-packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - correct hard-coded version in Makefile - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable bash-completion (#1999654) - Handle missing language error during spellcheck (#1929210) - Disable flake8 self-test (#1929210) - Used macros for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Removed rpath from python bindings Resolves: rhbz#1960385 - Removed rpath from python bindings better way Related: rhbz#1960385 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Used macros for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - F-34: rebuild against ruby 3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Removed rpath from python bindings Resolves: rhbz#1960385 - Removed rpath from python bindings better way Related: rhbz#1960385 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fixed stack buffer overflow in rrdcached and added more security checks Resolves: RHEL-173257 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update user-space rshim driver source to version 2.0.8 - Modify rshim.spec accordingly - Resolves: rhbz#2196626 - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518) - Resolves: RHEL-174952 - Fix integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174932 - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Resolves: RHEL-152536 - CVE-2025-10158 Out of bounds array access via negative index - Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-173468 - CVE-2024-12086 rsync server leaks arbitrary client files - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Fix TOCTOU symlink race in daemon no-chroot mode (CVE-2026-29518) - Resolves: RHEL-174952 - Fix integer overflow in compressed-token decoding (CVE-2026-43618) - Resolves: RHEL-174932 - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-67142 - Wrong progress reported by rsync when using copy-devices - Resolves: RHEL-29340 - Slowness in rsync due to extra validation steps. - Resolves: RHEL-18216 - rysnc script /usr/share/doc/rsync/support/rrsync is unsecure - Resolves: RHEL-70158 - Info Leak via Uninitialized Stack Contents - Resolves: RHEL-70208 - Path traversal vulnerability in rsync - Resolves: RHEL-70210 - --safe-links option bypass leads to path traversal - Resolves: RHEL-71657 - Race Condition in rsync Handling Symbolic Links - Resolves: RHEL-70265 - Rebase rsync to 3.2.5 - Resolves: RHEL-104404 - Do not clear DISPLAY unconditionally - Resolves: RHEL-152536 - CVE-2025-10158 Out of bounds array access via negative index - Resolves: RHEL-169151 - CVE-2026-41035 - Use-after-free vulnerability in extended attribute handling - Resolves: RHEL-173468 - CVE-2024-12086 rsync server leaks arbitrary client files - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - Rebase to 8.2310.0 Resolves: RHEL-5196 - Allow setting certificates for separate connections Resolves: RHEL-937 - Capability dropping feature can be turned off Resolves: RHEL-943 - imjournal: new module parameter filecreatemode Resolves: RHEL-949 - new directory for arbitrary external programs needed by omprog module Resolves: RHEL-8676 - Rebase to 8.2412.0 Resolves: RHEL-65177 - Fix segfault when $ControlCharacterEscapePrefix is set Resolves: RHEL-38222 Resolves: RHEL-70099 - Fix segfault due to processing malform queue message Resolves: RHEL-70100 - Fix $ActionQueueDiscardMark default value to 80% queue size Resolves: RHEL-70109 - Fix crash on startup when an invalid function is specified Resolves: RHEL-70111 - Add tmpfiles.d configuration Resolves: RHEL-89982 - Rebase to 8.2506.0 - imuxsock: track dropped messages by ratelimiting Resolves: RHEL-66274 - man page version update Resolves: RHEL-78220 - omfwd: do not hang forever in case of broken TLS handshake Resolves: RHEL-67639 - imfile: reintroduce deleteStateOnFileMove parameter Resolves: RHEL-92262 - Rebase to 8.2510.0 - gnutls netstream driver: improve doc Resolves: RHEL-86031 - rsyslog.conf: use RainerSscript syntax in actions Resolves: RHEL-42508 - gnutls netstream driver: report missing certificate just once Resolves: RHEL-105782 - migrate rtkit to systemd-sysusers (RHEL-5843) - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Fix the broken SSL tests with MariaDB 10.5.18. Resolves: RHEL-80220 - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475) Resolves: rhbz#1817135 - New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9) Resolves: rhbz#2063773 - Upgrade to mysql2 0.5.5. Related: RHEL-17089 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 - Upgrade to mysql2 0.5.7. Related: RHEL-142278 - New upstream release 0.5.3 by merging Fedora master branch (commit: 674d475) Resolves: rhbz#1817135 - New upstream release 0.5.4 by merging Fedora rawhide branch (commit: e21b5b9) Resolves: rhbz#2063773 - Upgrade to mysql2 0.5.5. Related: RHEL-17089 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 - Adapt tests to openssl 3.2 Resolves: RHEL-80222 - Disable tests on the 32bit platforms ix86. Related: RHEL-80222 - Upgrade to mysql2 0.5.7. Related: RHEL-142278 - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.7 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to pg 1.2.2. - Update to pg 1.2.3. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_3.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - rebuild for libpq ABI fix rhbz#1908268 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to pg 1.2.3 by merging Fedora master branch (commit: 5db4d26) Resolves: rhbz#1817135 - Update to pg 1.3.5 Related: rhbz#2063773 - Fix encoding issue in spec suite. Resolves: RHEL-159200 - Upgrade to pg 1.6.3 Related: RHEL-142278 - Update to pg 1.2.3 by merging Fedora master branch (commit: 5db4d26) Resolves: rhbz#1817135 - Update to pg 1.3.5 Related: rhbz#2063773 - Fix encoding issue in spec suite. Resolves: RHEL-159200 - Upgrade to pg 1.6.3 Related: RHEL-142278 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 3.0.7. Resolves: RHEL-35740 - Fix HTTP response splitting in CGI. Resolves: RHEL-35741 - Fix ReDoS vulnerability in URI. Resolves: RHEL-35742 - Fix ReDoS vulnerability in Time. Resolves: RHEL-35743 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-35744 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-35746 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-35747 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171254 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68525 - Undefine GC compaction methods on ppc64le. Resolves: RHEL-83136 - Fix printing warnings when using IRB from a script. Resolves: RHEL-83044 - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86104 - Fix ReDoS in CGI::Util#escapeElement. (CVE-2025-27220) Resolves: RHEL-86130 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171256 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181763 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181802 - Bypass git submodule test failure on Git >= 2.38.1. - Fix tests with Europe/Amsterdam pre-1970 time on tzdata version 2022b. - Fix for tzdata-2022g. - Fix OpenSSL.fips_mode and OpenSSL::PKey.read in OpenSSL 3 FIPS. Resolves: RHEL-5590 - ssl: use ffdhe2048 from RFC 7919 as the default DH group parameters Related: RHEL-5590 - Disable fiddle tests that use FFI closures. Related: RHEL-5590 - Upgrade to Ruby 3.1.4. Resolves: RHEL-5586 - Fix HTTP response splitting in CGI. Resolves: RHEL-5591 - Fix ReDos vulnerability in URI. Resolves: RHEL-28919 Resolves: RHEL-5612 - Fix ReDos vulnerability in Time. Resolves: RHEL-28920 - Make RDoc soft dependency in IRB. Resolves: RHEL-5613 - Upgrade to Ruby 3.1.5. Resolves: RHEL-33978 - Fix buffer overread vulnerability in StringIO. Resolves: RHEL-34129 - Fix RCE vulnerability with .rdoc_options in RDoc. Resolves: RHEL-34121 - Fix arbitrary memory address read vulnerability with Regex search. Resolves: RHEL-33871 - Fix REXML ReDoS vulnerability. (CVE-2024-49761) Resolves: RHEL-68526 - Upgrade to Ruby 3.1.7. Resolves: RHEL-85235 - Fix DoS vulnerability in REXML. (CVE-2024-39908) Resolves: RHEL-57050 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-127912 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-122015 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171255 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Fix arbitrary code execution via deserialization bypass in ERB. (CVE-2026-41316) Resolves: RHEL-171257 - Fix DoS via crafted IMAP responses in net-imap. (CVE-2026-42245) Resolves: RHEL-181693 - Fix information disclosure via MITM attack bypassing TLS in net-imap. (CVE-2026-42246) Resolves: RHEL-181779 - Fix command injection via Symbol arguments in net-imap. (CVE-2026-42258) Resolves: RHEL-181811 - Upgrade to Ruby 3.3.12. Resolves: RHEL-171335 Resolves: RHEL-193665 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Upgrade to Ruby 4.0.6. Resolves: RHEL-211301 Resolves: RHEL-193663 - Upgrade to Ruby 3.3.0. Resolves: RHEL-17089 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 3.3.1. Resolves: RHEL-33976 - Fix buffer overread vulnerability in StringIO. (CVE-2024-27280) Resolves: RHEL-34130 - Fix RCE vulnerability with .rdoc_options in RDoc. (CVE-2024-27281) Resolves: RHEL-34122 - Fix Arbitrary memory address read vulnerability with Regex search. (CVE-2024-27282) Resolves: RHEL-33872 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Upgrade to Ruby 3.3.5 Resolves: RHEL-55411 - Fix DoS vulnerability in rexml. (CVE-2024-39908) (CVE-2024-41946) (CVE-2024-43398) Resolves: RHEL-57575 Resolves: RHEL-57572 Resolves: RHEL-57068 - Fix REXML DoS when parsing an XML having many specific characters such as whitespace character, >] and ]>. (CVE-2024-41123) Resolves: RHEL-57569 - Fix incorrect symlink for rubygem-irb's library. Resolves: RHEL-42646 - Upgrade to Ruby 3.3.8. Resolves: RHEL-68631 - Fix Net::IMAP vulnerable to possible DoS by memory exhaustion. (CVE-2025-25186) - Fix Denial of Service in CGI::Cookie.parse. (CVE-2025-27219) Resolves: RHEL-86109 - Fix userinfo leakage in URI#join, URI#merge and URI#+. (CVE-2025-27221) - Upgrade to Ruby 3.3.10. Resolves: RHEL-106821 - Fix possible denial of service in resolv gem (CVE-2025-24294) - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594) - Fix REXML denial of service. (CVE-2025-58767) Resolves: RHEL-126728 - Upgrade to Ruby 4.0.1. Resolves: RHEL-142278 - Upgrade to Ruby 4.0.3. Resolves: RHEL-171933 - Fix ERB: Arbitrary code execution via deserialization bypass (CVE-2026-41316) Resolves: RHEL-171258 - Fix JSON: Denial of Service or Information Disclosure via format string injection (CVE-2026-33210) Resolves: RHEL-173458 - Fix Net::IMAP ResponseReader quadratic complexity vulnerability. (CVE-2026-42245) Resolves: RHEL-181690 - Fix Net::IMAP STARTTLS stripping vulnerability. (CVE-2026-42246) Resolves: RHEL-181771 - Fix Net::IMAP command injection vulnerability via unvalidated Symbol arguments. (CVE-2026-42258) Resolves: RHEL-181803 - Implement CPU affinity patch from Kir Kolishkin - Related: RHEL-60277 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.5 - Related: RHEL-60277 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.6 - Related: RHEL-80816 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.0 - Related: RHEL-80816 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.1 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.2 - Resolves: RHEL-124800 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.3 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.4.0 - Resolves: RHEL-132769 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146111 - Update to https://github.com/opencontainers/runc/releases/tag/v1.4.2 - Resolves: RHEL-165497 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.5 - Related: RHEL-60277 - update to https://github.com/opencontainers/runc/releases/tag/v1.2.6 - Related: RHEL-80816 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.0 - Related: RHEL-80816 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.1 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.2 - Resolves: RHEL-124800 - update to https://github.com/opencontainers/runc/releases/tag/v1.3.3 - Related: RHEL-111919 - update to https://github.com/opencontainers/runc/releases/tag/v1.4.0 - Resolves: RHEL-132769 - Rebuild for new golang to address CVE-2025-61726 - Resolves: RHEL-146111 - Update to https://github.com/opencontainers/runc/releases/tag/v1.4.2 - Resolves: RHEL-165497 - Rebuild for CVE-2026-25679 - Resolves: RHEL-158787 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 12 - Update to 13 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 14 - Update to 15 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 17 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - Update to 1.86.0 - Temporarily skip PGO on RHEL ppc64le - Update to 1.87.0 - Update to Rust 1.88.0 - Sync rust-toolset's rpm macros with RHEL 10 - Update to Rust 1.89.0 - Add unicode exceptions (rpminspect) for rust 1.89 update - Update to Rust 1.90 - Update to Rust 1.91.0 - Update to Rust 1.92.0 - nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402} - scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741} - smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988] - ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378] - RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966] - RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966] - net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207] - ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095] - net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766} - rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075} - KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401} - powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125] - libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136} - libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990} - libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984} - libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116} - scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742] - Revert "lpfc: don't use file->f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742] - Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742] - drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822] - drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822] - drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822] - x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853] - net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270} - net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204} - net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404] - crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204] - crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204] - crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204] - crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204] - crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060} - crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204] - crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677} - crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431} - crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204] - xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284} - net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300} - ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333} - md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163} - RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128} - usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607} - can: raw: fix ro->uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532} - Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1100-1196) - Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto authencesn/algif) - Keep the smb cifs.spnego ahead-fix (retained as 1197) - RHEL changelog for 687.6.1..687.10.1 follows: - mm/page_alloc: clear page->private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303} - ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441] - smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821] - smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821] - smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821] - smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821] - smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709} - Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408} - xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158} - redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927] - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051} - netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027} - s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859] - ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829] - ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829] - dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829] - ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179] - ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832] - ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257] - dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442] - dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442] - scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378] - netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685} - net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684} - cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960] - ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701] - ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701] - ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701] - ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701] - drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179] - nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366} - x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089} - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455} - crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724} - ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183} - i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312] - ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182] - ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185] - Revert "mm: pcp: increase pcp->free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464] - netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392} - dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626] - netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190} - wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110} - Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023} - Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020} - crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914] - proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653} - proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653} - pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470] - Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable backports (SOURCES/1198-1252) - RHEL changelog for 687.11.1..687.12.1 follows: - smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243} - s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472] - s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472] - nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745] - Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786} - crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167] - crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167] - smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613} - mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778] - mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778] - mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778] - mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778] - mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778] - mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778] - mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778] - mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778] - Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269) - RHEL changelog for 687.13.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181} - redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822] - ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501} - RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852} - netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116} - ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526] - ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336] - ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336] - ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336] - dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125} - dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273] - dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833] - dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833] - dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938] - dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938] - ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581} - net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216} - net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419} - x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916] - ip6_tunnel: clear skb2->cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037} - net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508} - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284) - redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822) - dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files) - RHEL changelog for 687.14.1..687.15.1 follows: - s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317] - ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308] - s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048] - gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984} - gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984} - bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260} - wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125} - RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145} - wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152} - wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166} - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056} - ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699] - mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669} - dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823] - dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823] - dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820] - dpll: add pin operational state (Ivan Vecera) [RHEL-175820] - can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474} - Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772} - xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787} - net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331} - gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann) - rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130] - scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414} - nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135} - RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117} - exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173} - ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279} - Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311) - RHEL changelog for 687.16.1..687.17.1 follows: - Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312) - net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057] - net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057] - IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057] - net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057] - net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057] - net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057] - net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057] - net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057] - net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057] - net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057] - net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057] - net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057] - net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057] - net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057] - net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057] - net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057] - net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057] - net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057] - net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057] - net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057] - net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057] - net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057] - net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057] - net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057] - mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057] - net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057] - net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057] - net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057] - net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057] - net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057] - net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057] - net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057] - net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057] - net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057] - net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057] - net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057] - net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057] - net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057] - RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057] - net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057] - mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057] - net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057] - net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057] - net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057] - net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057] - net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057] - net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057] - net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057] - net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057] - net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057] - net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057] - net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057] - net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057] - net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057] - net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057] - net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057] - net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057] - net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057] - net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057] - net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057] - net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057] - net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057] - net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057] - net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057] - net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057] - net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057] - net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057] - net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057] - net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057] - net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057] - net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057] - net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057] - net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057] - net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057] - net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057] - net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057] - net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057] - eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057] - net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057] - net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057] - net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057] - {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057] - net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057] - net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057] - IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057] - RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057] - net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057] - net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057] - net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057] - net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057] - net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057] - net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057] - net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057] - net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057] - net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057] - net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057] - net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057] - net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057] - net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057] - net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057] - net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057] - net: Fix typos (Kamal Heib) [RHEL-169057] - net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057] - net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057] - PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057] - net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057] - net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057] - net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057] - net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057] - net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057] - net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057] - net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057] - net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057] - net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057] - net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057] - net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057] - net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057] - net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057] - eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistake "disabliing" -> "disabling" (Kamal Heib) [RHEL-169057] - net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057] - net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057] - net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057] - net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057] - net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057] - net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057] - net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057] - net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057] - net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057] - net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057] - net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057] - net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057] - net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057] - net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057] - RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057] - net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057] - net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057] - net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057] - net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057] - net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057] - net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057] - net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057] - net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057] - net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057] - net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057] - net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057] - net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057] - net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057] - RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057] - net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057] - net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057] - net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057] - selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444] - ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444] - ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444] - ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054} - RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898} - ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090} - ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038} - drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488} - netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329} - RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176} - init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183] - update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183] - init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183] - work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183] - compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183] - powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183] - sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776] - sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776] - RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189} - sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273] - netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273] - iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993] - iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993] - iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993] - iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993] - iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993] - Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.18.1..687.19.1 follows: - crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540] - crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540] - crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540] - tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198} - crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739} - crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760] - crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760] - crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760] - scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886] - net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411} - Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709) - Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312) - RHEL changelog for 687.19.1..687.20.1 follows: - fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112} - Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263} - Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263} - KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316} - netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244} - procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259} - drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209} - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227} - nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966] - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735) - Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll ep_remove use-after-free CVE-2026-46242 (1712) - RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux ahead-patch (1312) is retained and RHEL's duplicate copy omitted - CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263) - RHEL changelog for 687.21.1..687.22.1 follows: - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755) - The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by RHEL's eventpoll series carrying the same fix and is dropped - Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738) - RHEL changelog for 687.23.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760) - The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are superseded by RHEL's copies and dropped - RHEL changelog for 687.24.1 follows: - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769) - The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499 (1756, 1757) are superseded by RHEL's copies and dropped - RHEL changelog for 687.25.1 follows: - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770) - RHEL changelog for 687.26.1 follows: - smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155} - smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041] - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116} - net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323} - net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276} - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773] - eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773] - eventpoll: drop vestigial epi->dying flag (Ian Kent) [RHEL-180773] - eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773] - eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773] - eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773] - eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242} - eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773] - eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773] - eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773] - eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074} - epoll: annotate racy check (Ian Kent) [RHEL-180773] - netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344] - tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768] - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359} - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113} - net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066} - futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166} - locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166} - futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499} - rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499} - net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086} - kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236] - kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236] - net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979} - crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016} - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937] - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886] - drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886] - drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886] - drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215} - drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886] - crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113} - crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943] - scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110} - net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121] - net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121] - net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121] - net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121] - net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121] - net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121] - net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121] - net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121] - net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121] - net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121] - net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121] - net/mlx5: Fix deadlock between devlink lock and esw->wq (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121] - net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121] - net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121] - net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121] - net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121] - net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121] - net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121] - net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121] - IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121] - RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121] - Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071} - libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980] - libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980] - fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150} - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685] - dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061] - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099} - xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337] - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807} - KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468] - KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468] - KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277] - KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026} - scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412] - drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950} - ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006} - drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976} - dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059} - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017} - futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973} - watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729] - redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729] - watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729] - watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729] - watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729] - watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729] - xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797} - iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281} - iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342] - lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002} - nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257] - nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257] - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993} - net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530} - ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923} - s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430] - s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471] - gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021] - timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214} - net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273] - octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331] - octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331] - net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331] - netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450} - powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575] - powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575] - mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058] - mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058] - mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058] - futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977} - futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554} - futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555} - futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415} - s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578] - s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580] - net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531} - cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530} - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036] - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518} - cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999] - cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999] - cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999] - cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999] - smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999] - smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999] - smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999] - mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368} - x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787] - net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264} - KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434] - KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434] - accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202} - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489] - net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508] - ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508] - cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548] - spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129] - spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129] - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619] - cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619] - smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619] - smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619] - Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762] - Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762] - Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762] - Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762] - Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762] - Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762] - Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762] - Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762] - Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762] - Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762] - Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762] - Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762] - Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762] - Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762] - Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762] - Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762] - nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489] - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765] - mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765] - mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100} - mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count (Rafael Aquini) [RHEL-150765] - mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883} - mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765] - mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765] - x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845} - mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765] - mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844} - redhat: update self-test data (Patrick Talbert) - redhat: set defaults for 9.8 (Patrick Talbert) - gitlab-ci: disttag override for 9.8 (Patrick Talbert) - ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085} - netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111} - bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171} - Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938] - Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938] - vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126] - vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126] - vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126] - vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126] - vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126] - virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126] - vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126] - vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126] - vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126] - vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126] - vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126] - vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126] - dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693] - HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818} - NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415] - perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340] - perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340] - perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340] - scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193} - nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552] - redhat: genlog: add new JIRA cloud server hostname (Jan Stancek) - gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055] - io_uring: graduate to full support (Jeff Moyer) [RHEL-120699] - netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231} - net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180} - net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424] - macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227] - macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209} - spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814] - spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814] - migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097} - ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191} - mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144} - ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365] - libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611] - libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611] - libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611] - libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611] - libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611] - libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611] - redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611] - redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611] - crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611] - crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611] - crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611] - ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210} - smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396] - wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040} - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243} - net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109} - iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567] - kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672] - Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko) - kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672] - Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert) - Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert) - Use AlmaLinux OS secure boot cert - Debrand for AlmaLinux OS - Add KVM support for ppc64le - KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds - proc: fix a dentry lock race between release_task and lookup - hpsa: bring back deprecated PCI ids #CFHack #CFHack2024 - mptsas: bring back deprecated PCI ids #CFHack #CFHack2024 - megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024 - qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024 - qla4xxx: bring back deprecated PCI ids - lpfc: bring back deprecated PCI ids - be2iscsi: bring back deprecated PCI ids - kernel/rh_messages.h: enable all disabled pci devices by moving to unmaintained - xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284) - rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (CVE-2026-46300 "Fragnesia") - ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe replacement for upstream 31e62c2ebbfd, Qualys Security Advisory) - crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431) - net: skbuff: propagate shared-frag marker through frag-transfer helpers (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300 "Fragnesia") - smb: client: reject userspace cifs.spnego descriptions (upstream commit 3da1fdf4efbc) - Stop adding BCC lines to subject - Resolves: RHEL-110823 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - add s390utils-se-data as a noarch subpackage with Secure Execution data files - Resolves: RHEL-10567 - rebased to 2.33.1 (RHEL-23704) - dbginfo.sh: missing data of new ROCE cards (RHEL-24109) - SE-tooling: New IBM host-key subject locality (RHEL-30273) - Fix disk type detection when running under QEMU (RHEL-40358) - Resolves: RHEL-23704 RHEL-24109 RHEL-30273 RHEL-40358 - avoid usage of the which tool (RHEL-38488) - Related: RHEL-38488 - rebased to 2.35.0 (RHEL-50026) - cpacfstats: support MSA 10 and MSA 11 (RHEL-50030) - Resolves: RHEL-50026 RHEL-50030 - rebased to 2.36.0 (RHEL-50026) - cpacfinfo: new tool to provide CPACF information (RHEL-50020) - chpstat: Additional Channel Measurements (RHEL-50023) - zPCI: Optics Monitoring for PF Access Mode (RHEL-50024) - KVM: Support extended attestation for Secure Execution (RHEL-50009) - KVM: genprotimg: validate if SE image can run on particular host(s) (RHEL-50008) - Vertical CPU Polarization Support Stage 2 (RHEL-64705) - KVM: Support unencrypted SE images by exposing resp. SE header flag (RHEL-70853) - KVM: Rewrite genprotimg in Rust (RHEL-72023) - Provide genprotimg / pvimg info command to display encrypted & unencrypted SE image information (RHEL-71819) - KVM: Support retrievable secrets in Secure Execution guests (RHEL-50019) - zkey key support for dm-crypt with XTS keys (RHEL-50010) - Resolves: RHEL-50026 RHEL-50020 RHEL-50023 RHEL-50024 RHEL-50009 RHEL-50008 RHEL-64705 RHEL-70853 RHEL-72023 RHEL-71819 RHEL-50019 RHEL-50010 - pvimg/genprotimg: Fix confidential dump support (RHEL-76912) - Resolves: RHEL-76912 - rebased to 2.38.0 (RHEL-73342) - LPAR level power consumption reporting (RHEL-72675) - Provide Topology-Map information to userspace (RHEL-72682) - Add CCK secret type for updating the Customer Communication Key (RHEL-73021) - Convert LUKS2 volume from AES keys to retrievable PAES keys (RHEL-85390) - Resolves: RHEL-73342 RHEL-72675 RHEL-72682 RHEL-73021 RHEL-85390 - cpi: Disable CPI for SEL guests by default (RHEL-76931) - Resolves: RHEL-76931 - rebased to 2.39.0 (RHEL-100439) - udev/rules.d: Set default io scheduler to 'none' for virtio-blk (RHEL-126743) - udev/rules.d: make virtio-blk devices non-rotational (RHEL-126745) - zipl: makedumpfile is required for ngdump support (RHEL-114663) - libekmfweb: Fix gen of cert or CSR to use RSA not RSA-PSS (RHEL-114885) - chpstat: Fix DPU utilization scaling in reports (RHEL-109215) - Resolves: RHEL-100439 RHEL-126743 RHEL-126745 RHEL-114663 RHEL-114885 RHEL-109215 - rebased to 2.40.0 (RHEL-100439) - zipl/boot: Fix unused loadparm when SCLP line-mode console is absent - Secure Execution: Add tool to verify host-key documents (RHEL-136796) - Resolves: RHEL-100439 RHEL-136796 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1990810 - Typo in the fontconfig file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - Security release for CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 CVE-2026-4480 CVE-2026-40170 CVE-2026-4408 - resolves: RHEL-156319 - CVE-2026-1933 CVE-2026-2340 CVE-2026-3012 samba: various flaws - resolves: RHEL-161657 - CVE-2026-4480 - Fix Samba printing - resolves: RHEL-170597 - CVE-2026-40170 - Update bundled ngtcp2 - resolves: RHEL-166868 - Add stack protection with FORTIFY_SOURCE - Bump build number - Update to version 4.23.4 - resolves: RHEL-114548 - Update to version 4.23.4 - resolves: RHEL-132995 - Fix Time Machine backup - resolves: RHEL-133003 - Remove unexpected dependency of libldb to samba - Remove libldb dependency to samba-common-libs - resolves: RHEL-133003 - Update to version 4.23.5 - resolves: RHEL-143401 - Fix winbind group resolution - resolves: RHEL-141027 - Fix winbind crash - Fix winbind memory leak seen with long living rpcd_* workers - resolves: RHEL-144480 - Fix 'net ads kerberos kinit -P' with option '--use-krb5-ccache' - resolves: RHEL-144590 - Fix samba-bgqd to load [printers] share - resolves: RHEL-147858 - Fix 'net ads kerberos kinit' to use default ccache name from krb5.conf - resolves: RHEL-147419 - Fix regression with --use-kerberos=desired for smbclient - resolves: RHEL-150824 - Fix samba automount triggering for more file systems - resolves: RHEL-169726 - Fix 'net ads join' AD replication race with multiple DCs - resolves: RHEL-169665 - make is no longer in buildroot by default - use smaller git-core instead of git - 1890866 - sane-airscan-0.99.19 is available - 1900160 - sane-airscan-0.99.20 is available - 1897935 - Crash on libsane-airscan when trying to activate scanner - 0.99.21 - 1906510 - sane-airscan-0.99.22 is available - 1914565 - sane-airscan-0.99.23 is available - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1922563 - sane-airscan-0.99.24 is available - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1928484 - sane-backends-1.0.32 is available - python3 is now needed for building pixma backend - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095461 - [RFE] sane-backends use systems-sysusers - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1928484 - sane-backends-1.0.32 is available - python3 is now needed for building pixma backend - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095461 - [RFE] sane-backends use systems-sysusers - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1928484 - sane-backends-1.0.32 is available - python3 is now needed for building pixma backend - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095461 - [RFE] sane-backends use systems-sysusers - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1928484 - sane-backends-1.0.32 is available - python3 is now needed for building pixma backend - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095461 - [RFE] sane-backends use systems-sysusers - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1928484 - sane-backends-1.0.32 is available - python3 is now needed for building pixma backend - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095461 - [RFE] sane-backends use systems-sysusers - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1928484 - sane-backends-1.0.32 is available - python3 is now needed for building pixma backend - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095461 - [RFE] sane-backends use systems-sysusers - 1750899 - CANOSCAN N650U scanner device not correctly detected via USB - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 1928484 - sane-backends-1.0.32 is available - python3 is now needed for building pixma backend - Rebuilt for updated systemd-rpm-macros See https://pagure.io/fesco/issue/2583. - 1934308 - Several Epson devices cannot scan because they fail to set focus - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2095461 - [RFE] sane-backends use systems-sysusers - fix rpm issues - upstream release, fix rpm issues - upstream release - fix invalid strcpy in direct dump - upstream release 3.9.5, and udevadm settle patch - spec file fixes - new nodelay flag for add_lockspace - new upstream release - Bump release. - new upstream release - fix rpm issues - upstream release, fix rpm issues - upstream release - fix invalid strcpy in direct dump - upstream release 3.9.5, and udevadm settle patch - spec file fixes - new nodelay flag for add_lockspace - new upstream release - Bump release. - new upstream release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Remove #define PyString_AsString PyUnicode_AsUTF8 - python: Adapt to changes made in PEP 590 - New upstream version - Fix leaks in koops stacktrace- and report-handling code - Replace utility code with GLib functions - Fix unit test portability issue - Add build dependency on make - Add fix for https://bugzilla.redhat.com/show_bug.cgi?id=1898063 - New upstream version - Fix builds with python3.10 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - New upstream version - lib: Use GLib for computing SHA-1 digests - sr_distances_cluster_objects: Check arg safety - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against json-c-0.14-11 Related: rhbz#2023326 - Bump release to address sbc-devel inclusion to CRB Resolves: RHEL-105435 - sync with fedora sbd-1.5.0-1 Resolves: rhbz#1979961 Resolves: rhbz#1979573 - properly conflict with pacemaker not providing sync-default we need Resolves: rhbz#1979961 Resolves: rhbz#1979573 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - rebase to upstream v1.5.1 Resolves: rhbz#2013261 - obviously autoconf is defining runstatedir - but with a wrong default - directly hand it over to configure and skip --with-runstatedir implemented in configure.ac for older versions of autoconf Resolves: rhbz#2011707 - Be a bit more descriptive on issues opening watchdog-devices Resolves: rhbz#2108122 - rebase to upstream v1.5.2 - convert license naming to SPDX - make static analysis happy with a few checks & rearanges with dynamic-memory-management Resolves: rhbz#2168579 - Add support for Image Mode Resolves: RHEL-132483 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros, patch by Tom Stellard <tstellar@redhat.com> - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OpenSSL certificates set up Resolves: RHEL-118293 - Eliminate use of obsolete %patchN syntax Related: RHEL-91101 - Add sysusers.d config file to allow rpm to create users/groups automatically and drop attempt to delete group Related: RHEL-91101 - Add support for Image Mode Resolves: RHEL-91101 - Add support for post-quantum cryptography Resolves: RHEL-127515 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix crash when using "cmx" command with no additional parameter Resolves: #2083577 - Rebase to a new upstream release 0.1.74 (RHEL-53865) - Ensure authselect features are preserved by enable_authselect rule (RHEL-39383) - Fix check for passwords last changed date (RHEL-47129) - Remediations of Journald configuration files now include a correct section (RHEL-38531) - Adjust service requirements for CIS profiles (RHEL-23852) - Update password hashing settings for ANSSI-BP-028 (RHEL-44983) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - Turn on SCE for this release (RHEL-94803) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - Update to the latest upstream release (RHEL-135773) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Add AlmaLinux 9 support - Rebase to a new upstream release 0.1.74 (RHEL-53865) - Ensure authselect features are preserved by enable_authselect rule (RHEL-39383) - Fix check for passwords last changed date (RHEL-47129) - Remediations of Journald configuration files now include a correct section (RHEL-38531) - Adjust service requirements for CIS profiles (RHEL-23852) - Update password hashing settings for ANSSI-BP-028 (RHEL-44983) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - Turn on SCE for this release (RHEL-94803) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - Update to the latest upstream release (RHEL-135773) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Add AlmaLinux 9 support - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - Turn on SCE for this release (RHEL-94803) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - Update to the latest upstream release (RHEL-135773) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - rule rsyslog_remote_access_monitoring handles Rainer syntax objects as case insensitive (RHEL-171951) - Fixed remediation problems occurring when authselect profiles contain multiple authselect features (RHEL-165050) - Rebase scap-security-guide to 0.1.81 (RHEL-180787) - Add AlmaLinux 9 support - Rebase to a new upstream release 0.1.74 (RHEL-53865) - Ensure authselect features are preserved by enable_authselect rule (RHEL-39383) - Fix check for passwords last changed date (RHEL-47129) - Remediations of Journald configuration files now include a correct section (RHEL-38531) - Adjust service requirements for CIS profiles (RHEL-23852) - Update password hashing settings for ANSSI-BP-028 (RHEL-44983) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - Turn on SCE for this release (RHEL-94803) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - Update to the latest upstream release (RHEL-135773) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Add AlmaLinux 9 support - Rebase to a new upstream release 0.1.74 (RHEL-53865) - Ensure authselect features are preserved by enable_authselect rule (RHEL-39383) - Fix check for passwords last changed date (RHEL-47129) - Remediations of Journald configuration files now include a correct section (RHEL-38531) - Adjust service requirements for CIS profiles (RHEL-23852) - Update password hashing settings for ANSSI-BP-028 (RHEL-44983) - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - Turn on SCE for this release (RHEL-94803) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - Update to the latest upstream release (RHEL-135773) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - Add AlmaLinux 9 support - Rebase to new release (RHEL-66154) - the rule sshd_use_priv_separation is no longer used (RHEL-66057) - add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005) - remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426) - Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018) - Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206) - rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240) - modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936) - make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120) - align checking of approved SSH ciphers with latest STIG policy (RHEL-65432) - Rebase to scap-security-guide version 0.1.77 (RHEL-94803) - rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843) - rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731) - improve checking of Grub2 superuser and password configuration (RHEL-58818) - Turn on SCE for this release (RHEL-94803) - fix incorrect applicability of Grub2 UEFI specific rules - replace grub-mkconfig with grub2-mkconfig in rule descriptions - rebase scap-security-guide package to version 0.1.78 (RHEL-118557) - Update to the latest upstream release (RHEL-135773) - Fix inconsistent and missing audit keys in some audit rules (RHEL-141394) - Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201) - Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448) - Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549) - Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737) - Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941) - Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121) - rule rsyslog_remote_access_monitoring handles Rainer syntax objects as case insensitive (RHEL-171951) - Fixed remediation problems occurring when authselect profiles contain multiple authselect features (RHEL-165050) - Rebase scap-security-guide to 0.1.81 (RHEL-180787) - Add AlmaLinux 9 support - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Remove qt5-devel from "Requires" section https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/WO625MVYEAAJNHNRLEEJDVZTIWMQOBRR/ - Update for new CMake out of source builds https://fedoraproject.org/wiki/Changes/CMake_to_do_out-of-source_builds - Fix Qt5 deprecated symbols - Fix FTBS in Rawhide/F33 (RHBZ#1865462) - Replace obsolete QString::SkipEmptyParts - Use reference to avoid range-loop-construct diagnostic - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Do not set rpath (rhbz#1986352) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix appdata (rhbz#2021212) - Ported 1.2.2 patches that we are present in el8 packages (rhbz#2029381) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix dist tag syntax (#1958982) - Fix problem with python version in the byte compilation script (#1984598) - Own directory /etc/scl (#1986040) - Rebase to 2.0.3 (#1986085) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don't error out when command receives SIGINT (#2056462) - Remove tmp file (#2151261) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix dist tag syntax (#1958982) - Fix problem with python version in the byte compilation script (#1984598) - Own directory /etc/scl (#1986040) - Rebase to 2.0.3 (#1986085) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Don't error out when command receives SIGINT (#2056462) - Remove tmp file (#2151261) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - update to 2.6.1 - update URLs - merge patches from Red Hat and upstream - apply analyzer fixes from upstream - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to new snapshot release - Update to new snapshot release - Update to new snapshot release - Ensure SDL2 dependency is arched - Update to new snapshot release - Update to new snapshot release - Obsolete the SDL package properly - Bump for rebuild after resync - Conflict with all old SDL subpackages properly - Rebase to 1.2.52 Resolves: rhbz#2060907 - Rebase to 1.2.60 Resolves: rhbz#2127565 - Update to 3.37.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.2 - Update to 3.38.0.1 - Switch to libhandy1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.38.1 - Update to 40.alpha - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 40.0 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Allow insights-client manage /etc symlinks Resolves: RHEL-108826 - Allow insights-client get attributes of the rpm executable Resolves: RHEL-127329 - Allow ras-mc-ctl get attributes of the kmod executable Resolves: RHEL-103975 - Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern Resolves: RHEL-101155 - Allow bootupd delete symlinks in the /boot directory Resolves: RHEL-101155 - Update policy for bootupd Resolves: RHEL-101155 - Allow create kerberos files in postgresql db home Resolves: RHEL-123225 - Allow sysadm access to TPM Resolves: RHEL-119055 - Update policy for dhcpc_hook_t Resolves: RHEL-113941 - Allow stap server read virtual memory sysctls Resolves: RHEL-114157 - Allow login_userdomain watch /home and /var directories Resolves: RHEL-119686 - Allow login_userdomain read lastlog Resolves: RHEL-119686 - Allow staff role read/write cockpit-session unix stream sockets Resolves: RHEL-108068 - Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t Resolves: RHEL-113941 - Add the rpm_signal() interface Related: RHEL-108826 - Allow tuned_t use its private tmpfs files Related: RHEL-108826 - Allow kdump search kdumpctl_tmp_t directories Resolves: RHEL-66119 - Revert "Allow NM nvme dispatcher script start systemd services" Resolves: RHEL-111946 - Allow ssh_agent_type create a sockfile in /run/user/USERID Resolves: RHEL-121936 - Allow NM nvme dispatcher script start systemd services Resolves: RHEL-111946 - Allow aide get attributes of a filesystem with extended attributes Resolves: RHEL-121480 - Label miscellaneous /dev/papr-* devices Resolves: RHEL-129879 - Add insights_client service interfaces Related: RHEL-140893 - Confine rhc-worker-playbook.worker and rhc-playbook-verifier Resolves: RHEL-132748 - Allow gpg manage rpm cache Related: RHEL-108775 - Allow gpg read rpm cache Related: RHEL-108775 - Allow aide get attributes of tmpfs and devtmpfs filesystems Resolves: RHEL-121480 - Allow rules for confined users logged in plasma Resolves: RHEL-133898 - Allow login_userdomain watch lnk_files in /usr Resolves: RHEL-133898 - Macros: Require only "stable" version of selinux-policy (RHEL-141433) - Add the fs_write_tmpfs_files() interface Resolves: RHEL-142141 - Dontaudit aide the execmem permission Resolves: RHEL-121480 - Update gpg policy for interactions with rhc-playbook-verifier Resolves: RHEL-132748 - Allow rhc_playbook_verifier_t stream connect to itself Resolves: RHEL-132748 - Update policy for rhc-worker-playbook Resolves: RHEL-132748 - Allow traceroute_t bind rawip sockets to unreserved ports Resolves: RHEL-130267 - Revert "Allow traceroute_t bind rawip sockets to unreserved ports" Related: RHEL-130267 - Allow sudodomain connect to gkeyringd over a unix stream socket Resolves: RHEL-121158 - Allow samba-bgqd send to smbd over a unix datagram socket Resolves: RHEL-95985 - Allow ssh_agent_type manage generic cache home files Resolves: RHEL-121165 - Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t Resolves: RHEL-121165 - Allow boothd connect to systemd-machined over a unix socket Resolves: RHEL-140882 - Label /run/insights-client.ppid with insights_client_run_t Resolves: RHEL-146688 - Update gpg_role() interface with unix_stream_socket permissions Resolves: RHEL-128542 - Allow nfsd_t domain setuid and setgid capability for rpc.mountd Resolves: RHEL-148247 - Rebuild with the target::exception flag Resolves: RHEL-148247 - Fixed verification of the ghost files Resolves: rhbz#2052091 - Fixed verification of the ghost files Resolves: rhbz#2052091 - Fixed verification of the ghost files Resolves: rhbz#2052091 - Update required userspace versions to 3.4 - Drop unnecessary Recommends - SETools 4.4.1 release - SETools 4.4.2 release - Disable sediff --neverallow and --neverallowxperm options - SETools 4.4.3 release - Improve man pages - seinfoflow: Add -r option to get flows into the source type. - seinfoflow.1: Remove references to sepolgen permission map. - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy. - SELinuxPolicy: Add explicit cast for libspol message - SETools 4.4.4 release - Update required userspace versions to 3.4 - Drop unnecessary Recommends - SETools 4.4.1 release - SETools 4.4.2 release - Disable sediff --neverallow and --neverallowxperm options - SETools 4.4.3 release - Improve man pages - seinfoflow: Add -r option to get flows into the source type. - seinfoflow.1: Remove references to sepolgen permission map. - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy. - SELinuxPolicy: Add explicit cast for libspol message - SETools 4.4.4 release - Update required userspace versions to 3.4 - Drop unnecessary Recommends - SETools 4.4.1 release - SETools 4.4.2 release - Disable sediff --neverallow and --neverallowxperm options - SETools 4.4.3 release - Improve man pages - seinfoflow: Add -r option to get flows into the source type. - seinfoflow.1: Remove references to sepolgen permission map. - AVRule/AVRuleXperm: Treat rules with no permissions as invalid policy. - SELinuxPolicy: Add explicit cast for libspol message - SETools 4.4.4 release - Always reset pending alarms when alarm(0) (rhbz#2112573) - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393) - Fix build with pip 23.1.2+ - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy - Rename session bus name to org.fedoraproject.sealert - seapplet: wrap SEApplet() to try except - util.py: Add doctext test for build_module_type_cache() - Update translations - Update tmpfiles.d config (bz#2346971) - Do not hardcode /var/lib/selinux as store_root - data: update app icon - Enable Georgian and Arabic (ar) languages in configure.ac - Update translations - Ship with contemporary app icon - Check that SELinux is enabled before running (rhbz#2178950) - audit_data: include syslog when needed (RHEL-39978) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Add plugin which analyzes execmem denials - Add missing "If " strings - Update qemu_blk_image and qemu_file_image - Update "xen_image" plugin - Update "file" plugin - Update "missing" scripts to automake-1.15 - Use get_package_nvr* functions instead of get_rpm_nvr* - Update deprecated type references - Update translations - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update translations - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - restorecon.py: exclude more paths (#1960136) - Always reset pending alarms when alarm(0) (rhbz#2112573) - 'imp' module is deprecated in favor of 'importlib' (rhbz#2224393) - Fix build with pip 23.1.2+ - Remove dbus-glib-devel BR as it's only needed when compiled with seappletlegacy - Rename session bus name to org.fedoraproject.sealert - seapplet: wrap SEApplet() to try except - util.py: Add doctext test for build_module_type_cache() - Update translations - Update tmpfiles.d config (bz#2346971) - Do not hardcode /var/lib/selinux as store_root - data: update app icon - Enable Georgian and Arabic (ar) languages in configure.ac - Update translations - Ship with contemporary app icon - Check that SELinux is enabled before running (rhbz#2178950) - audit_data: include syslog when needed (RHEL-39978) - Split setxkbmap out from xorg-x11-xkb-utils into its own package (#1895795) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix buffer overflow with high port numbers (RHEL-14440) - Initial release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with mpath_valid changes. - Add epoch to rpm spec file for RHEL-based releases. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with mpath_valid changes. - Add epoch to rpm spec file for RHEL-based releases. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with mpath_valid changes. - Add epoch to rpm spec file for RHEL-based releases. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with mpath_valid changes. - Add epoch to rpm spec file for RHEL-based releases. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with mpath_valid changes. - Add epoch to rpm spec file for RHEL-based releases. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with mpath_valid changes. - Add epoch to rpm spec file for RHEL-based releases. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with mpath_valid changes. - Add epoch to rpm spec file for RHEL-based releases. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with mpath_valid changes. - Add epoch to rpm spec file for RHEL-based releases. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Sync with mpath_valid changes. - Add epoch to rpm spec file for RHEL-based releases. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Convert to new fonts packaging guidelines - Update fontconfig DTD id in conf file - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 2.200 - Corrected shape of U+300D and U+300F - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Initial package Resolves: bz#2071748 - 6.6.2 Resolves: bz#2118862 - Fixed the handling of exceptions that sub-class C++ exceptions Resolves: bz#2225259 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Update to upstream version 0.3.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - Add plexus-container-default alias - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Switch to a newer patch macro syntax - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Update to upstream version 0.9.0.M3 - Update javapackages test plan to f42 - Fix bats dep on tests subpackage - Resolves: RHEL-80616 - fix gating.yaml - Related: RHEL-80816 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for golang >= 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898 - Fix bats dep on tests subpackage - Resolves: RHEL-80616 - fix gating.yaml - Related: RHEL-80816 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - update to https://github.com/containers/skopeo/releases/tag/v1.19.0 - Related: RHEL-80816 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Do not require BATS on RHEL - Resolves: RHEL-97592 - update to https://github.com/containers/skopeo/releases/tag/v1.20.0 - Related: RHEL-80816 - rebuild for CVE-2025-58183 - Resolves: RHEL-125721 - update to https://github.com/containers/skopeo/releases/tag/v1.21.0 - Related: RHEL-111919 - update to https://github.com/containers/skopeo/releases/tag/v1.22.0 - Related: RHEL-111919 - Rebuild for new golang to address CVE-2025-68121 - Resolves: RHEL-149649 - update to https://github.com/containers/skopeo/releases/tag/v1.22.2 - fixes signature verification of images which only sign the per-platform manifest in skopeo proxy - Resolves: RHEL-168166 - Rebuild for CVE-2026-25679 - Re-add test file installation to fix tier0 tests - Resolves: RHEL-158789 - Rebuild for CVE-2026-32283 - Resolves: RHEL-167688 - Rebuild for golang >= 1.26.4 to fix CVE-2026-27145 - Resolves: RHEL-189898 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild against libnsl 2.0.0 - Related: rhbz#2039220 - upstream release 0.60.0 - Change license from GPLv2 to GPLv3+ to follow 389-ds licensing - Fix ID views integration - Fix base scope lookups - Bump NIS max dgram size to 8KB by default instead of 1KB - Resolves: rhbz#2117299 Allow to rebuild the compat tree - Rebuild to fix changelog - Related: rhbz#2117299 - Fix base DN searches outside the compat tree - Resolves: rhbz#2183950 - Also handle base searches within the compat tree - Related: rhbz#2183950 - Ignore updates from non-tracked subtrees during modify/modrdn/update to avoid deadlocks with retro changelog - Resolves: RHEL-11983 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuilt for java-17-openjdk as system jdk - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Rebuild to regenerate auto-requires - Build with default JDK 17 - Convert License tag to SPDX format - Rebuild to regenerate auto-Requires on java - Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild - bump of release for for java-21-openjdk as system jdk - Rebuilt for java-21-openjdk as system jdk - Update to upstream version 1.7.36 - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild - Rebuild to regenerate auto-requires - Update javapackages test plan to f42 - Rebuild to regenerate auto-requires - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.1 - Related: #2176063 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.2 - Related: Jira:RHEL-2112 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.2.3 - Related: RHEL-2112 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.0 - Related: RHEL-27608 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.1 - Related: RHEL-27608 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.2 - Related: RHEL-60277 - update to https://github.com/rootless-containers/slirp4netns/releases/tag/v1.3.3 - Resolves: RHEL-94765 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New release smc-meera-fonts-7.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - New release smc-rachana-fonts-7.0.3 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-50215 - Update to 1.8.4 - Resolves: RHEL-73360 - Update to 1.8.5 - Resolves: RHEL-100169 - Update to 1.8.6 - Update to upstream 0.4.3 - Update test path in main.fmf - Bump tests/upstream/main.fmf duration to 30m - Update to upstream 0.5.1 - Update TMT configuration - Update to upstream 0.5.2 - Update expected string in TMT version test - schedule: fix TIMELINE policy retention indexing when keep_x > len(x) - Update to upstream 0.7.0 - Update the version test expectation. - Updated to new release. - Dropped version-related patch which has been applied upstream (BZ #1527850). - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use __cmake_in_source_build - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop BuildRequires dependency on gtest - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix IPv6 peername segfault (RHEL-32438) - add fix for CVE-2024-54661 Resolves: RHEL-94843 - switch to autopatch, remove unused patches - Fix for: Client may exit 0 despite connection being reset Resolves: RHEL-107884 - Handle EAGAIN on recvmsg() Resolves: RHEL-143222 - Run p11test tests individually - Resolves: rhbz#2261703 - Prevent access to global C++ variables once they destroyed - Patch from Neil Horman (OpenSSL) - Revert SPDX license change as RHEL 9 does not use it - Use systemd-sysusers Resolves: RHEL-76028 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Make sombok-devel package multilib safe (bug #1853260) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for shipping devel subpackage in CRB - Bind token as SQL_BINARY (RHEL-43418) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed FTBFS - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.10.1 - Fix crash with python 3.9 (#1878276) - Update to 0.10.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed FTBFS - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.10.1 - Fix crash with python 3.9 (#1878276) - Update to 0.10.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Fixed FTBFS - Rebuilt for Python 3.9 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 0.10.1 - Fix crash with python 3.9 (#1878276) - Update to 0.10.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild Fix building with the latest GCC. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Link with -Wl,-z,now Resolves: rhbz#2044891 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file - Resolves: CVE-2020-23903 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.2.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to spice-vdagent 0.21.0 - Build without pciaccess Resolves: rhbz#1964922 - Fix g_memdup deprecation warning with glib >= 2.68 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Limit session agent to (re)connect to system agent to a minute Related: rhbz#2028013 - Avoid crash due use before initialisation of X11 events Related: rhbz#2160750 - Update to 1.3.268.0 SDK - Update to 1.3.283.0 SDK - Update to 1.4.304.0 SDK - Update to 1.4.313.0 SDK - Rebuilt to move the package to AppStream Resolves: https://issues.redhat.com/browse/RHEL-115524 - Update to 1.4.328.1 SDK Resolves: https://issues.redhat.com/browse/RHEL-127928 - Update to 1.4.328.1 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - use a proper build macros - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - make is no longer in buildroot by default - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enabled sqlite-session feature - Resolves: RHEL-89962 - Fixes CVE-2025-6965 - Enable sqlite3_deserialize and sqlite3_serialize interfaces - Resolves: RHEL-155950 - Enabled sqlite-session feature - Resolves: RHEL-89962 - Fixes CVE-2025-6965 - Enable sqlite3_deserialize and sqlite3_serialize interfaces - Resolves: RHEL-155950 - Fixes CVE-2026-11824 - Resolves: RHEL-218281 - Fixes CVE-2026-11822 - Resolves: RHEL-218273 - Enabled sqlite-session feature - Resolves: RHEL-89962 - Fixes CVE-2025-6965 - Enable sqlite3_deserialize and sqlite3_serialize interfaces - Resolves: RHEL-155950 - Enabled sqlite-session feature - Resolves: RHEL-89962 - Fixes CVE-2025-6965 - Enable sqlite3_deserialize and sqlite3_serialize interfaces - Resolves: RHEL-155950 - Fixes CVE-2026-11824 - Resolves: RHEL-218281 - Fixes CVE-2026-11822 - Resolves: RHEL-218273 - Resolves: RHEL-12356 - TCP_MISS_ABORTED/100 erros when uploading - Disable ESI support - Resolves: RHEL-65080 - CVE-2024-45802 squid: Denial of Service processing ESI response content - Resolves: RHEL-67869 - Remove gopher mention from spec file - Resolves: RHEL-57030 - squid aborts trying to access memory - Resolves: RHEL-77282 - ”TCP connection to XX.XX.XX.XX/XXXX failed” message is output frequently on RHEL9 - Resolves: RHEL-50261 - Squid memory usage increases until OOM. - Resolves: RHEL-77084 - squid crashes with noteDestinationsEnd check failed - Resolves: RHEL-122493 - squid: Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVE-2025-62168) - Resolves: RHEL-119047 - "ICAP_ERR_OTHER/408" occurs in icap.log when downloading a file on RHEL9 - Resolves: RHEL-160697 - squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling (CVE-2026-33526) - Resolves: RHEL-160696 - squid: Squid: Denial of Service via crafted ICP traffic (CVE-2026-32748) - x509: Use proper version for CSR - Resolves: RHEL-85851 - Ensure 'critical' basicConstraint for CA cert - Resolves: RHEL-88119 - Fix IP address handling in CA certificate SAN constraints - Resolves: RHEL-107289 - Restore creation of dhparams file by default - Update to SSCG 4.0.1 - Update to SSCG 4.0.3 - Fix issues discovered by OSCI tests - Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Vendor rust dependencies on el9 - New release - Remove Windows binaries from vendor tarball - New release - Regenerate with rust2rpm 22 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to new upstream version - Use make macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebase to new upstream version - Rebuild - Rebuild - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation - Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root - Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9] - Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7 - Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9] - Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID - Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9] - Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649 - Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] - Resolves: RHEL-103434 - cache_credentials = true not working - Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9] Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted. - Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release - Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8 - Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites - Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name - Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none' - Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so - Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges - Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux - Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache - Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group - Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified - Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c' - Make fill_process_comm() open comm file as READ_ONLY Resolves: RHEL-25846 - Updated compile options for annocheck hardening - Ensure we resolve library symbols at load time (-z now) and are a Position Independent Executable (-pie). Refactored compile options to better deal with arch differences. - Added an 'annocheck' makefile target for local checking. - Makefile: change build to use FORTIFY_SOURCE=3 - src/utils.c: fix off-by-one error in buffer allocation Resolves: RHEL-33662 - Fix changelog to use RPMCFLAGS, allowing for bpf to be used Resolves: RHEL-33662 - Makefile: add uninstall target - systemd: add BE environment variable to select backend Resolves: RHEL-33662 - Rebase to stalld-1.19.8 Resolves: RHEL-92952 - Check if sched_attr is in glibc Resolves: RHEL-92952 - Rebase to stalld-1.20.2 Resolves: RHEL-96213 RHEL-96227 RHEL-104106 - Rebase to stalld-1.20.3 - Make systemd start stalld with the SCHED_FIFO:10 priority Resolves: RHEL-109088 - Rebase to stalld-1.20.4 - Remove duplicated ExecStart entry from the stalld.service file Resolves: RHEL-108827 - Rebase to stalld-1.26.3 - Build System Improvements and added riscv64 arch - Remove LTO build flags - Make queue_track the default backend - Remove the -m64 build option Resolves: RHEL-111528 RHEL-111526 RHEL-96207 RHEL-96205 RHEL-111803 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - 2.0.2-2 ✅ Rebuild with fonts-rpm-macros 2.0.2 - 2.0.2-3 ✅ Lint, lint, lint and lint again - 2.0.2-4 👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.0.2-5 💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid - 2.0.2-6 🐞 Workaround Fedora problems created by rpm commit 93604e2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 2.0.2-8 - Fix this spec file to build for F33+ - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to version 3.4.0 - Resolves: rhbz#2124977 - Return no-op on overprovision command on error - Resolves: rhbz#2131934 - Return error on init-cache if cache is present - Resolves: rhbz#2141223 - send_uevent: remove strict parameter - Resolves: rhbz#2158914 - Update to version 3.5.2 - Resolves: rhbz#2167462 - Allow for inconsistent value in StoppedPools D-Bus property - Resolves: rhbz#2213325 - Update to version 3.6.0 - Resolves: RHEL-2265 - Update to 3.7.0 - Resolves: RHEL-59855 - Update to version 3.6.1 - Resolves: RHEL-2278 - Add filesystem growth limits - Resolves: RHEL-12898 - Ensure proper alignment of flex devices - Resolves: RHEL-16736 - Update to 3.6.7 - Resolves: RHEL-34250 - Update to 3.7.3 - Resolves: RHEL-59854 - Update to 3.7.3-2 - Resolves: RHEL-115006 - Fix problem with FTBFS - Resolves: RHEL-120658 - Update to version 3.6.1 - Resolves: RHEL-2278 - Add filesystem growth limits - Resolves: RHEL-12898 - Ensure proper alignment of flex devices - Resolves: RHEL-16736 - Update to 3.6.7 - Resolves: RHEL-34250 - Update to 3.7.3 - Resolves: RHEL-59854 - Update to 3.7.3-2 - Resolves: RHEL-115006 - Fix problem with FTBFS - Resolves: RHEL-120658 - Update to version 3.6.1 - Resolves: RHEL-2278 - Add filesystem growth limits - Resolves: RHEL-12898 - Ensure proper alignment of flex devices - Resolves: RHEL-16736 - Update to 3.6.7 - Resolves: RHEL-34250 - Update to 3.7.3 - Resolves: RHEL-59854 - Update to 3.7.3-2 - Resolves: RHEL-115006 - Fix problem with FTBFS - Resolves: RHEL-120658 - Rebase to upstream V0.17.08 - ARM: Don't declare inlined yield helper if yield is not available Resolves: RHEL-33304 - Fix missing corresponding macro to apply patch Resolves: RHEL-33304 - Update the stress-ng-0.18.06 upstream - Include some upstream patches after 0.18.06 Resolves: RHEL-65474 - Rebase to stress-ng-0.19.01 upstream Resolves: RHEL-86707 - Rebase to stress-ng-0.19.03 upstream Resolves: RHEL-115230 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 - mod_dav_svn: inherit DavBasePath from httpd Resolves: RHEL-79948 - mod_dav_svn: add conflicts to ensure compatible mod_dav Related: RHEL-79948 RHEL: 9.7.0 ERRATUM - sudo missing spacing and separator in log when using "--preserve-env=list" Resolves: RHEL-71916 - CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100020 - Request to backport support for regex in sudo [rhel-9] Resolves: RHEL-1376 - Rebase of sudo to 1.9.17p2 [rhel-9] Resolves: RHEL-128623 - sudo passes SHELL environment variable twice to the shell being executed [rhel-9] Resolves: RHEL-127359 - CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166069 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - drop metis Resolves: #1977815 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Disable lazy binding (#2044892) - Remove RPATH (#2056604) - Rebase to Fedora Rawhide resolves: RHEL-56805 - Enable building for ppc64le - Enable web process sandbox Resolves: #2070670 - Allow running without WebKitGTK installed Resolves: RHEL-26698 + switcheroo-control-2.0-1 - Update to 2.0 + switcheroo-control-2.0-2 - Fix post scripts not reloading service file + switcheroo-control-2.1-1 - Update to 2.1 - Fix crasher on startup (#1786846) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + switcheroo-control-2.2-1 - Update to 2.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + switcheroo-control-2.4-1 - Update to 2.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to v0.8.0 release Resolves: rhbz#2092944 - Fix SHA-1 algorithm availability Resolves: RHEL-46788 - Update to v0.8.0 release Resolves: rhbz#2092944 - Fix SHA-1 algorithm availability Resolves: RHEL-46788 - Update to v0.8.0 release Resolves: rhbz#2092944 - Fix SHA-1 algorithm availability Resolves: RHEL-46788 - make initial release - fix compiler warning (#2141038) - add simple test (#2141038) - update to 20221114gitca51d5 (#2141038) - update to 20221122git9564b5 (#2143264) - update to 1.0.0 (RHEL-10089 RHEL-1645 RHEL-17948 RHEL-17949) - update to 1.1.0 (RHEL-52089 RHEL-52090 RHEL-52091 RHEL-52197) - fix requested thread stack size on aarch64 (RHEL-54121) - Fix erroneous my_strncat implementation Resolves: RHEL-83777 - isohybrid: Make GPT GUIDs reproducible with --uefi and --id - Resolves: #RHEL-96214 - Bump release number - Resolves: #RHEL-96214 - Update to 3.39.90 - Specify pic for static libsysprof-capture - Update to 3.39.92 - Split sysprof-capture library and header files out to sysprof-capture-devel - Update minimum required glib2 version - Update to 3.39.94 - Add explicit conflicts to help with upgrades - Update to 3.40.0 - Update to 3.40.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix allocation errors with malformed sa files (RHEL-35684) - reorder patches to prevent errors during their application - don't cap SVG graph output at 100% (RHEL-39002) - fix creation of /var/log/sa in image mode (RHEL-129980) - make the sadf -s/-e documentation more accurate (RHEL-123483) - python3.9 - xml module removed elem.getchildren() method, use list(elem) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1884866 - s-c-p: isAlive() is removed, use is_alive() - 1.15.13 - set preferred driver for Dymo LabelWriter 400 - 1750156 - hangs on selection of change PPD (Make and Model) - 1.5.15, apply eln changes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - python3.9 - xml module removed elem.getchildren() method, use list(elem) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 1884866 - s-c-p: isAlive() is removed, use is_alive() - 1.15.13 - set preferred driver for Dymo LabelWriter 400 - 1750156 - hangs on selection of change PPD (Make and Model) - 1.5.15, apply eln changes - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.3.0 - Resolves: #RHEL-94597 - Update to 1.4.0 - Resolves: #RHEL-103125 - Update to 1.5.1 - Resolves: #RHEL-104335 - Update to 1.7.0 - Resolves: #RHEL-109555 - Update to 1.7.1 - Resolves: #RHEL-111339 - Update to 1.8.0 - Update to 1.10.0 - Resolves: #RHEL-125340 - Update to 1.12.0 - Resolves: RHEL-140335 - Update to 1.12.1 - Fix mount point check regression breaking bootc-image-builder - Resolves: RHEL-142112 - Update to 1.13.0 - https://github.com/bootc-dev/bootc/releases/tag/v1.13.0 - Resolves: RHEL-151443 - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215) - strv: introduce string_strv_hashmap_remove() (RHEL-14112) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801) - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558) - timer: rebase last_trigger timestamp if needed (RHEL-118215) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - core: only activate transaction that contain useful jobs (RHEL-143727) - manager: fix scope for environment generators (RHEL-154262) - core: validate input cgroup path more prudently (RHEL-152082) - Debrand for AlmaLinux - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - core: only activate transaction that contain useful jobs (RHEL-143727) - manager: fix scope for environment generators (RHEL-154262) - core: validate input cgroup path more prudently (RHEL-152082) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - fstab-generator: support swap on network block devices (RHEL-166186) - Debrand for AlmaLinux - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215) - strv: introduce string_strv_hashmap_remove() (RHEL-14112) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801) - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558) - timer: rebase last_trigger timestamp if needed (RHEL-118215) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - core: only activate transaction that contain useful jobs (RHEL-143727) - manager: fix scope for environment generators (RHEL-154262) - core: validate input cgroup path more prudently (RHEL-152082) - Debrand for AlmaLinux - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - core: only activate transaction that contain useful jobs (RHEL-143727) - manager: fix scope for environment generators (RHEL-154262) - core: validate input cgroup path more prudently (RHEL-152082) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - fstab-generator: support swap on network block devices (RHEL-166186) - Debrand for AlmaLinux - timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215) - strv: introduce string_strv_hashmap_remove() (RHEL-14112) - unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112) - core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112) - TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112) - coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801) - ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558) - timer: rebase last_trigger timestamp if needed (RHEL-118215) - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - core: only activate transaction that contain useful jobs (RHEL-143727) - manager: fix scope for environment generators (RHEL-154262) - core: validate input cgroup path more prudently (RHEL-152082) - Debrand for AlmaLinux - cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859) - cryptsetup-generator: continue parsing after error (RHEL-127859) - cryptsetup-generator: parse all cmdline devices too (RHEL-127859) - cryptsetup-generator: always process cmdline devices (RHEL-127859) - logind: add "background-light" session class (RHEL-109833) - pam_systemd: honor session class provided via PAM environment (RHEL-109833) - core: fix array size in unit_log_resources() (RHEL-131338) - pid1: add env var to override default mount rate limit burst (RHEL-129153) - pid1: add env var to override default mount rate limit interval (RHEL-129153) - update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622) - core/service: fix error cause in the log (RHEL-138414) - fstab-generator: drop assertions for mount opts (RHEL-92752) - fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752) - core: reorder systemd arguments on reexec (RHEL-111135) - basic: add RuntimeScope enum (RHEL-137252) - runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252) - sd-path: add support for XDG_STATE_HOME (RHEL-137252) - sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252) - path tool: add some basic ansi highlighing (RHEL-137252) - execude: include RuntimeScope field in ExecParameters (RHEL-137252) - execute: remove redundant assignment (RHEL-137252) - execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252) - execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252) - execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252) - execute: shorten some code by using RET_NERRNO() (RHEL-137252) - execute: shorten code by making use of laccess() return code properly (RHEL-137252) - execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252) - test: add test for new XDG_STATE_HOME handling (RHEL-137252) - man: mention the newly-added XDG_STATE_HOME (RHEL-137252) - man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252) - man: properly close XML tags (RHEL-137252) - tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252) - test: use XDG_STATE_HOME for %S and %L (RHEL-137252) - man: fully adopt ~/.local/state/ (RHEL-137252) - core: only activate transaction that contain useful jobs (RHEL-143727) - manager: fix scope for environment generators (RHEL-154262) - core: validate input cgroup path more prudently (RHEL-152082) - nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870) - nspawn: normalize pivot_root paths (RHEL-163870) - udev: check for invalid chars in various fields received from the kernel (RHEL-163876) - udev: fix review mixup (RHEL-163876) - udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876) - fstab-generator: support swap on network block devices (RHEL-166186) - Debrand for AlmaLinux - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - RHEL-50107.patch: Make systemtap compatible with kernel commit 68cbd415dd4b . Related: RHEL-56962 . - Upstream release, see wiki page below for detailed notes. - https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - RHEL-RHEL-89809: stap-server log owned by root - RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels. - Upstream release, see wiki page below for detailed notes. https://sourceware.org/systemtap/wiki/SystemTapReleases - Backport upstream patch 53c48b550 imply kernel<vmlinux.h> check by file name. - Fix RHEL-130244 - Fix RHEL-132676 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.12 (#1584870) - use versioned obsoletes - -devel: fix/drop -lz references in taglib-config, taglib.pc - fix multilib.patch (#1943870) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix image mode deployment of directory keys Resolves: RHEL-105012 - Update to version 2.1.75 - Update to version 2.1.76 - Fix a regression in LUN creation and ACL mapping Jira: RHEL-23294 - restoreconfig: Do not return success if the file doesn't exist - Remove jQuery from Doxygen output (RHEL-77697) - Remove jQuery from Doxygen output (RHEL-77697) - Remove jQuery from Doxygen output (RHEL-77697) - Re-enable LTO - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for i686 release Resolves: rhbz#2099397 - Re-enable LTO - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for i686 release Resolves: rhbz#2099397 - Resolves: #2188429 - enable GUESS_TSO for large packets - Resolves: RHEL-10714 - Fix PGM option printing - Resolves: RHEL-21558 - tcpslice: use-after-free in extract_slice() - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Avoid gcc 10 to fail during build on "multiple definition of handle_interrupt" - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Switch to stderror() when parsing history so that we stop processing immediately to avoid crashes - Update to tcsh-6.22.03 - Drop tcsh-6.22.02-avoid-gcc-to-fail.patch - applied by upstream - Drop tcsh-6.22.02-call-seterror-consistently-and-abort-quickly.patch - applied by upstream - Drop tcsh-6.22.02-avoid-crashing-when-loading-corrupted-history.patch - applied by upstream - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump version number - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Modifiers no longer breaks history - rhbz#1997986 - Modernize spec file - License corrected to ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1)) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: #1814478 - Arbitrary remote code execution in utility.c via short writes or urgent data - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Resolves: #1882606 - in.telnetd needs to tolerate temporary EIO errors - Changing LD_FLAGS to RPM_LD_FLAGS - Use make_build macro and remove hard-coded gcc - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Resolves: #1814478 - Arbitrary remote code execution in utility.c via short writes or urgent data - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Resolves: #1882606 - in.telnetd needs to tolerate temporary EIO errors - Changing LD_FLAGS to RPM_LD_FLAGS - Use make_build macro and remove hard-coded gcc - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild for ICU 65 - Update to 4.1.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuild for ICU 67 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for inclusion of new subpackages - Resolves: RHEL-113420 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Fix build failure on CentOS Stream. Related: rhbz#1951306 - Revert patch for FSF addresses (it became obsolete with 12.2) - Remove Obsoletes and Provides tetex-preview - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - Related: #1960650 - fixed license tags and rpath issue - Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #2014453, runtime requirement on python-unversioned-command - Related: #2014453, fixed dependencies - Resolves: #2031879, fix invalid symlink to mktexmf - Resolves: #2209872, CVE-2023-32700 - fix regression with too chatty syslog calls when IPv6 is disabled (RHEL-19588) - fix creation of /var/lib/tftpboot in image mode (RHEL-77491) - tftp: propagate exit codes in non-interactive mode (RHEL-96947) - fix regression with too chatty syslog calls when IPv6 is disabled (RHEL-19588) - fix creation of /var/lib/tftpboot in image mode (RHEL-77491) - tftp: propagate exit codes in non-interactive mode (RHEL-96947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 0.7.2 - Switch to use OpenType Font Format - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use new macros, update config.\* locations - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 140.4.0 ESR - Update to 140.5.0 ESR - Update to 140.6.0 ESR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.5.0 ESR - Update to 140.6.0 ESR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.11.0 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.6.0 ESR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.11.0 ESR - Update to 140.12.0 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Update to 140.7.0 ESR - Update to 140.8.0 ESR - Update to 140.9.0 ESR - Update to 140.9.1 ESR - Update to 140.10.0 ESR - Update to 140.10.1 ESR - Update to 140.11.0 ESR - Update to 140.12.0 ESR - Update to 140.13.0 ESR - AlmaLinux changes - Add gcc-toolset-14-gcc-c++ to BR - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119986 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120007 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120768 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769 - Fix CVE-2024-9632: xorg-x11-server: heap-based buffer overflow privilege escalation vulnerability Resolves: RHEL-62001 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Add clipboard support to x0vncserver Resolves: RHEL-74216 - Fix crash in clipboard support in x0vncserver Resolves: RHEL-74216 - 1.15.0 Resolves: RHEL-78617 - Add SELinux policy rules allowing to access /proc/sys/fs/nr_open Resolves: RHEL-77973 - Add SELinux policy rules allowing to create directories under /root Resolves: RHEL-77975 - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-80208 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in XkbVModMaskText() Resolves: RHEL-80189 - Fix CVE-2025-26596 xorg-x11-server Heap overflow in XkbWriteKeySyms() Resolves: RHEL-80194 - Fix CVE-2025-26597 xorg-x11-server Buffer overflow in XkbChangeTypesOfKey() Resolves: RHEL-80196 - Fix CVE-2025-26598 xorg-x11-server Out-of-bounds write in CreatePointerBarrierClient() Resolves: RHEL-80197 - Fix CVE-2025-26599 xorg-x11-server Use of uninitialized pointer in compRedirectWindow() Resolves: RHEL-80206 - Fix CVE-2025-26600 xorg-x11-server Use-after-free in PlayReleasedEvents() Resolves: RHEL-80205 - Fix CVE-2025-26601 xorg-x11-server Use-after-free in SyncInitTrigger() Resolves: RHEL-80209 - Fix inetd mode not working Resolves: RHEL-86511 - Only warn about 8 characters limit, but let it proceed Resolves: RHEL-89432 - Fix broken authentication with x0vncserver Resolves: RHEL-93573 - Fix CVE-2025-49175: xorg-x11-server: Out-of-Bounds Read in X Rendering Extension Animated Cursors Resolves: RHEL-97284 - Fix CVE-2025-49176: xorg-x11-server: Integer Overflow in Big Requests Extension Resolves: RHEL-97303 - Fix CVE-2025-49178: xorg-x11-server: Unprocessed Client Request Due to Bytes to Ignore Resolves: RHEL-97379 - Fix CVE-2025-49179: xorg-x11-server: Integer overflow in X Record extension Resolves: RHEL-97414 - Fix CVE-2025-49180: xorg-x11-server: Integer Overflow in X Resize, Rotate and Reflect (RandR) Extension Resolves: RHEL-97429 - Fix CVE-2025-62229: xorg-x11-server: Use-after-free in XPresentNotify structures creation Resolves: RHEL-119989 - Fix CVE-2025-62230: xorg-x11-server: Use-after-free in Xkb client resource removal Resolves: RHEL-120009 - Fix CVE-2025-62231: xorg-x11-server: Value overflow in Xkb extension XkbSetCompatMap() Resolves: RHEL-120770 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163213 Resolves: RHEL-163281 Resolves: RHEL-163267 - Fix CVE-2026-34352 Resolves: RHEL-167986 - Rebuild for updated xorg-x11-server Resolves: RHEL-184003 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Honoured distribution LDFLAGS Resolves: rhbz#2044894 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for i686 release Resolves: rhbz#2099398 - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for i686 release Resolves: rhbz#2099398 - Exit transfer loop when output fd is closed - Revert "Prevent infinite transfer loop on GDM login" - Update the Fedora license - MAN: Add missing comma in tlog-rec-session.conf - Provide a sysusers.d file to get user() and group() provides (see https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format). - Release v14 - configure: correctly handle systemd versions before 245 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update OpenSSL certificates set up Resolves: RHEL-81721 - Remove deprecated path from systemd service file Resolves: RHEL-81716 - Use systemd-sysusers for the 'pegasus' user and group creation - Fix Requires of subpackages Related: RHEL-90737 - Add support for Image Mode Resolves: RHEL-90737 - Add support for post-quantum cryptography Resolves: RHEL-127514 - Fix multilib issue with systemd-sysusers config Related: RHEL-90737 - Update OpenSSL certificates set up Resolves: RHEL-81721 - Remove deprecated path from systemd service file Resolves: RHEL-81716 - Use systemd-sysusers for the 'pegasus' user and group creation - Fix Requires of subpackages Related: RHEL-90737 - Add support for Image Mode Resolves: RHEL-90737 - Add support for post-quantum cryptography Resolves: RHEL-127514 - Fix multilib issue with systemd-sysusers config Related: RHEL-90737 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Resolves: RHEL-35812 - Rebase tomcat to version 9.0.87 - Resolves: RHEL-29257 tomcat: Apache Tomcat: WebSocket DoS with incomplete closing handshake (CVE-2024-23672) - Resolves: RHEL-29252 tomcat: : Apache Tomcat: HTTP/2 header handling DoS (CVE-2024-24549) - Resolves: RHEL-53001 - Amend tomcat's changelog (CVE-2023-46589, CVE-2023-45648, CVE-2023-42795, CVE-2023-42794, CVE-2023-44487, CVE-2023-41080) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-46163 tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750) - Resolves: RHEL-18245 - OpenJDK 21 support for RHEL Tomcat - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-82945 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT (CVE-2025-24813) - Resolves: RHEL-71723 tomcat: RCE due to TOCTOU issue in JSP compilation (CVE-2024-50379) - Resolves: RHEL-91763 tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) - Resolves: RHEL-71985 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) - Resolves: RHEL-108489 tomcat: Apache Commons FileUpload DOS via part headers (CVE-2025-48976) - Resolves: RHEL-108497 tomcat: Dos in multipart upload (CVE-2025-48988) - Resolves: RHEL-108505 tomcat: Security constraint bypass for pre/post-resources (CVE-2025-49125) - Resolves: RHEL-108513 tomcat: Denial of service (CVE-2025-52434) - Resolves: RHEL-108529 tomcat: Denial of service (CVE-2025-52520) - Resolves: RHEL-108523 tomcat: Denial of service (CVE-2025-53506) - Resolves: RHEL-102201 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames (CVE-2025-48989) - Resolves: RHEL-124516 tomcat: Directory traversal via rewrite with possible RCE (CVE-2025-55752) - Resolves: RHEL-132561 tomcat: Bypass of rules in Rewrite Valve (CVE-2025-31651) - Resolves: RHEL-148687 Update to 9.0.110 and compile with Java 25 to enable FFM features for PQC support - Resolves: RHEL-154364 Tomcat fails to respond to client connections when using Java 8 - Resolves: RHEL-168081 Fix copy/paste error in AJP connector that caused DELETE requests to be processed as OPTIONS requests (BZ#69848) - Resolves: RHEL-150714 Certificate revocation bypass due to improper OCSP response validation - Resolves: Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled (CVE-2026-34500) - Resolves: Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer token (CVE-2026-34487) - Resolves: Tomcat: The fix for CVE-2026-29146 allowed the bypass of the EncryptInterceptor (CVE-2026-34486) - Resolves: Tomcat: Incomplete escaping of JSON access logs (CVE-2026-34483) - Resolves: Tomcat: The fix for CVE-2025-66614 was incomplete (CVE-2026-32990) - Resolves: Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default (CVE-2026-29146) - Resolves: Tomcat: OCSP checks sometimes soft-fail even when soft-fail is disabled (CVE-2026-29145) - Resolves: Tomcat: Configured TLS cipher preference order not preserved (CVE-2026-29129) - Resolves: Tomcat: Occasionally open redirect (CVE-2026-25854) - Resolves: Tomcat: Request smuggling via invalid chunk extension (CVE-2026-24880) - Resolves: Tomcat: Incomplete OCSP verification checks (CVE-2026-24734) - Resolves: Tomcat: Security constraint bypass (CVE-2026-24733) - Resolves: Tomcat: Client certificate verification bypass due to virtual host mapping (CVE-2025-66614) - Resolves: RHEL-183992 Remove tomcat clustering JAR from RPM builds - Exclude i686 architecture from build - Rebuild for CVE-2023-45290 and CVE-2024-24785 Resolves: RHEL-28393, RHEL-28485 - Rebuild for CVE-2024-24788 Resolves: RHEL-35942 - Rebuild for CVE-2024-24791 Resolves: RHEL-47194 - Update to 0.0.99.6 Resolves: RHEL-61578 - Update to 0.1.1 Resolves: RHEL-61907 - Add 'Requires: flatpak-session-helper' Resolves: RHEL-97099 - Update to 0.1.2 Resolves: RHEL-95209 - Update to 0.2 - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787 Resolves: RHEL-104455 - Update to 0.3 Resolves: RHEL-117475 - Fall back to 'getent passwd' when SHELL is unset Resolves: RHEL-152801 - Rebuild for CVE-2023-45290 and CVE-2024-24785 Resolves: RHEL-28393, RHEL-28485 - Rebuild for CVE-2024-24788 Resolves: RHEL-35942 - Rebuild for CVE-2024-24791 Resolves: RHEL-47194 - Update to 0.0.99.6 Resolves: RHEL-61578 - Update to 0.1.1 Resolves: RHEL-61907 - Add 'Requires: flatpak-session-helper' Resolves: RHEL-97099 - Update to 0.1.2 Resolves: RHEL-95209 - Update to 0.2 - Fix CVE-2025-23266, CVE-2025-23267, and GHSA-fv92-fjc5-jj9h or GO-2025-3787 Resolves: RHEL-104455 - Update to 0.3 Resolves: RHEL-117475 - Fall back to 'getent passwd' when SHELL is unset Resolves: RHEL-152801 + totem-pl-parser-3.26.4-1 - Update to 3.26.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild + totem-pl-parser-3.26.4-3 - Disable quvi support on RHEL + totem-pl-parser-3.26.5-1 - Update to 3.26.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + totem-pl-parser-3.26.5-3 - Disable quvi, upstream is dead, and it doesn't compile with lua 5.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 + totem-pl-parser-3.26.6-1 - Update to 3.26.6 - Resolves: rhbz#1976722 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Remove user-creation code that is already handled by a requirement. Resolves: RHEL-8814 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Fix dependency. Resolves: rhbz#1929701 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Include interface for Keylime Resolves: rhbz#2157894 - Fix two source over-reads detected by gcc-11 - New upstream release - Avoid stringop-overflow diagnostic in testsuite - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Unbreak the build on s390x (#1923383) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Work around for openssl 3.0 update. Related: rhbz#1958030 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix product version for gating Resolves: rhbz#1972907 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix two source over-reads detected by gcc-11 - New upstream release - Avoid stringop-overflow diagnostic in testsuite - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Unbreak the build on s390x (#1923383) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Work around for openssl 3.0 update. Related: rhbz#1958030 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Fix product version for gating Resolves: rhbz#1972907 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Backport upstream fixes. - tpm2_checkquote: Fix check of magic number. (CVE-2024-29038) - tpm2_checkquote: Add comparison of pcr selection. (CVE-2024-29039) - Fix check of magic number. Resolves: RHEL-23198 Resolves: RHEL-41031 Resolves: RHEL-41035 - Backport upstream bugfix for tpm2_eventlog Resolves: RHEL-83453 - Backport upstream fixes. Resolves: RHEL-72772 - Fix endianity issues. Resolves: RHEL-79885 Resolves: RHEL-94933 Resolves: RHEL-113400 - Create /var/run/reboot-required file (frostyx@email.cz) - Recommend the correct command for restarting auditd (frostyx@email.cz) - Add python3-setuptools dependency (frostyx@email.cz) - Fix argument passed to print_helper() (ferdnyc@gmail.com) - Add similar software to the readme (frostyx@email.cz) - Update url references to point to tracer.readthedocs.io (dcampano@gmail.com) - Oracle Linux 8 uses dnf, too (suttner@atix.de) - Drop python-setuptools runtime dependency (frostyx@email.cz) - Fix Python DeprecationWarning: invalid escape sequence (jvanderwaa@redhat.com) - Add readthedocs configuration file (frostyx@email.cz) - Update license to SPDX (frostyx@email.cz) - Update tito releasers (frostyx@email.cz) - Rather create a /run/reboot-required not /var/run/reboot-required (frostyx@email.cz) - Fix querying RPM files on EPEL7 (frostyx@email.cz) - Use backported lru_cache on EPEL7 (frostyx@email.cz) - Don't hang forever when executed via SSH (frostyx@email.cz) - Don't check if package is installed before listing its files (frostyx@email.cz) - Replace regexes where they are not needed (frostyx@email.cz) - Query all packages at once, its faster than one by one (frostyx@email.cz) - Cache some properties for a massive performance boost (frostyx@email.cz) - Refactor unnecessary condition (frostyx@email.cz) - Fix weird indentation (frostyx@email.cz) - Pass the whole application to the provided_by function, not just its name (frostyx@email.cz) - Stop using deprecated rpm.fi (frostyx@email.cz) - Attempt to fix readthedocs deprecation error (frostyx@email.cz) - More reliable check if /usr/lib/sysimage/dnf/ database should be used (frostyx@email.cz) - Fix parameters for specifying the target user (frostyx@email.cz) - Resolves: RHEL-6988 - Rebuild with gating.yaml - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 3.1.0.rc, based on earlier tracker3 packaging - Obsolete separate tracker3 packages - Obsolete libtracker-control and libtracker-miner - Add conflicts with tracker3 packages to help with the upgrade path - Update to 3.1.0 - Update to 3.1.1 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 3.1.2 - Ship tracker-devel in CRB - Backport module-based libsoup support Resolves: rhbz#2137366 - Backport seccomp rules from recent releases Resolves: rhbz#2130143 - Do not include RSS miner service on RHEL Resolves: rhbz#2041633 - Backport stricter seccomp jail Resolves: RHEL-12469 - Avoid hardcoding /usr prefix - Use globs for man page compression - Use make_build and make_install macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_why_the_makeinstall_macro_should_not_be_used - Pass -pie separately to %{make_build} - Pass --tag=CC to libtool invocations - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - new release - rebased tuned to latest upstream related: RHEL-50568 - clear plugin repository when stopping tuning - man: add description of the balanced-battery profile - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - Fixed privileged execution of arbitrary scripts by active local user, (CVE-2024-52336) Resolves: RHEL-66638 - Added sanity checks for API methods parameters, (CVE-2024-52337) Resolves: RHEL-66615 - new release - rebased tuned to latest upstream resolves: RHEL-70457 - tuned-ppd: removed the use of StrEnum - tuned-ppd: fixed traceback - tuned-ppd: multiple fixes and updates - docs: plugins docs are now automatically generated from the docstrings - plugin_cpu: fixed no_turbo boolean option parsing resolves: RHEL-51760 - plugin_cpu: allowed raw energy_performance_preference values - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters resolves: RHEL-58820 - plugin_bootloader: added variables to BLS entries only if grub is used - plugin_scheduler: do not assume that perf events have type attribute - plugin_scheduler: updated sched knobs for kernels 6.6+ - plugin_scheduler: log process info when its affinity cannot be changed - plugin_scheduler: postpone cgroup blacklist check, double-check after fail resolves: RHEL-72981 - plugin_scheduler: made perf support optional - plugin_net: added support for hotplug and rename resolves: RHEL-60906 - makefile: added support for installation to custom $BINDIR/$SBINDIR - functions: dropped cpuspeed support - new release - rebased tuned to latest upstream related: RHEL-70457 - sap-hana: Set transparent_hugepages to madvise - plugin_bootloader: export Grub variables to make them available in submenus - utils.commands: fixed CPU online detection when not present - plugin_net: handled cqe-mode-rx ethtool option - profiles: correct CPU governor settings - new release - rebased tuned to latest upstream related: RHEL-70457 - plugins: added missing instance parameters - disk: added missing remove parameter - plugin_scheduler: added switch to disable processing of kthreads - Makefile: added support for installation to custom LIBEXECDIR - functions: create a new parser object for each string expansion resolves: RHEL-75773 - Fix handling of kernel arguments on bootc systems resolves: RHEL-45836 resolves: RHEL-86814 - new release - rebased tuned to latest upstream resolves: RHEL-94808 - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor - tuned-ppd: enabled sysfs_acpi_monitor by default - tuned-ppd: fixed inotify watch for performance degradation - tuned-ppd: pinned virtual files in memory for inotify - fixed instance priority inheritance - hotplug: added fixes for device remove race condition - tuned-main.conf: added startup_udev_settle_wait option - functions: silenced errors if module kvm_intel does not exist resolves: RHEL-79943 - functions: make calc_isolated_cores return CPU ranges resolves: RHEL-75751 - scsi: used 'med_power_with_dipm' for SATA ALPM - scsi: do not set ALPM on external SATA ports - network_latency: Set non-zero rcutree.nohz_full_patience_delay - realtime: Disable appropriate P-State drivers resolves: RHEL-85637 - plugin_disk: added support for MMC (MultiMediaCard) devices - udev: fix possible traceback in device matcher - udev-settle: obey udev buffer size and handle possible tracebacks - daemon: re-raise daemon init exception in no-daemon mode resolves: RHEL-71304 - vm: deprecate dirty_ratio in favour of dirty_bytes with percents resolves: RHEL-101578 - gui: fix the profile deleter script - new release - rebased tuned to latest upstream related: RHEL-94808 - new release - rebased tuned to latest upstream resolves: RHEL-123607 - cpu-partitioning: autodetect dracut hook directory, systemd workaround - openshift: optimize TCP settings for high throughput and low latency - profiles: Set boost=1 in *-performance profiles - sap-hana: force latency to 70 us, not to C-states - man: fixed instance_acquire_devices example in tuned-adm man - spec: use correct python interpreter for documentation installation - sysctl: add reapply_sysctl_exclude option - ppd: ask tuned recommend for base profile - new release - rebased tuned to latest upstream related: RHEL-123607 - net: added more coalescing options, filter out unsupported ones resolves: RHEL-181668 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Add java patch to fix incorrect calculations for Africa/Casablanca starting in 2027. (RHEL-26860) - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Harden against links to removed zones (RHEL-60063) - Don't use -source 1.6 and -target 1.6 with javac. (RHEL-70308) Update to tzdata-2025a (RHEL-74308) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Update to tzdata-2025b (RHEL-84741) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. - Included NEWS file with docs. (RHEL-105043) - Update to tzdata-2025c (RHEL-135158) - Update leap seconds file expiration date - Update to tzdata-2026a (RHEL-154025) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Harden against links to removed zones (RHEL-60063) - Don't use -source 1.6 and -target 1.6 with javac. (RHEL-70308) Update to tzdata-2025a (RHEL-74308) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Update to tzdata-2025b (RHEL-84741) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. - Included NEWS file with docs. (RHEL-105043) - Update to tzdata-2025c (RHEL-135158) - Update leap seconds file expiration date - Update to tzdata-2026a (RHEL-154025) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2026b (RHEL-170784) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2024b - Improve historical data for Mexico, Mongolia, and Portugal. - System V names are now obsolescent. - The main data form now uses %z. - The code now conforms to RFC 8536 for early timestamps. - Support POSIX.1-2024, which removes asctime_r and ctime_r. - Assume POSIX.2-1992 or later for shell scripts. - SUPPORT_C89 now defaults to 1. - Include two upstream patches for month names as in April vs Apr. - Harden against links to removed zones (RHEL-60063) - Don't use -source 1.6 and -target 1.6 with javac. (RHEL-70308) Update to tzdata-2025a (RHEL-74308) - Paraguay is now permanently at -03. This impacts timestamps starting on 2025-03-22. - Includes improvements to pre-1991 data for the Philippines. - Etc/Unknown is now reserved. - Update to tzdata-2025b (RHEL-84741) - Chile's Aysén Region moves from -04/-03 to -03 year-round, diverging from America/Santiago and creating a new zone America/Coyhaique. - Included NEWS file with docs. (RHEL-105043) - Update to tzdata-2025c (RHEL-135158) - Update leap seconds file expiration date - Update to tzdata-2026a (RHEL-154025) - Correct the transition times for Moldova. - The POSIXRULES option is now obsolete. - Update to tzdata-2026b (RHEL-170784) - British Columbia’s 2026-03-08 spring forward is expected to be its last transition as it moves to permanent -07. - Update to tzdata-2026c (RHEL-194098) - Alberta moved to permanent -06 on 2026-06-18. - Morocco moves to permanent +00 on 2026-09-20. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Provide OpenType Bitmap fonts - Add ucs-miscfixed-opentype-fonts sub package - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt with fonttosfnt 1.2.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Resolves: rhbz#1933581 - Don't BuildRequires xorg-x11-font-utils - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves:rhbz#1962002 - Add gating tests - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 2.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Import to c9s Resolves: #1949905 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Bump release to preserve upgrade path (#2160401) - Improve code readability based on lint and black findings - Fix generating policy for Crio mounts - Add --devices option - v0.2.7 release changes: - Improve label collection for mounts and devices (RHEL-16245) - Add support for containerd via "nerdctl inspect" - Avoid duplicate rules for accessing mounts and devices - Add option to generate custom policy for a confined user (RHEL-28166) - Add tests covering confined user policy generation - confined: make "-l" non optional - confined: allow asynchronous I/O operations - tests: Fix targetcli_config.json (RHEL-16229) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - tests: Fix targetcli_config.json (RHEL-16229) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - tests: Fix targetcli_config.json (RHEL-16229) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - tests: Fix targetcli_config.json (RHEL-16229) - udiskslinuxblockobject: Try issuing BLKRRPART ioctl harder - lvm2: Refactor udisks_daemon_util_lvm2_wipe_block() - udiskslinuxmanager: Add lower bounds check to fd_index (CVE-2025-8067) (RHEL-109413) - update to version 23.11 - add uki-direct subpackage - Resolves: RHEL-19383 - add "obsoletes: rhel-cvm-update-tool" to uki-direct - update to version 24.1 - Resolves: RHEL-21090 - update to version 24.1.1 - update to version 24.2 - update to version 24.4 - update to version 24.7 - update to version 24.11 - Resolves: RHEL-69507 - backport bootctl fix for 99-uki-uefi-setup.install - Resolves: RHEL-84984 - Add possibility to disable unbound-anchor by file presence - Resolves: RHEL-78694 - Add as112 networks config file - Resolves: RHEL-78696 - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL‑177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL-177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix CVE-2026-40622 (RHEL-184840) Fix CVE-2026-44390 (RHEL-186688) Fix CVE-2026-41292 (RHEL-187352) Fix CVE-2026-42534 (RHEL-187095) - Fix CVE-2026-55973 (RHEL-212809) - Add possibility to disable unbound-anchor by file presence - Resolves: RHEL-78694 - Add as112 networks config file - Resolves: RHEL-78696 - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL‑177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL-177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix CVE-2026-40622 (RHEL-184840) Fix CVE-2026-44390 (RHEL-186688) Fix CVE-2026-41292 (RHEL-187352) Fix CVE-2026-42534 (RHEL-187095) - Fix CVE-2026-55973 (RHEL-212809) - Add possibility to disable unbound-anchor by file presence - Resolves: RHEL-78694 - Add as112 networks config file - Resolves: RHEL-78696 - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Prevent unbounded name compression (CVE-2024-8508) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL‑177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix regression on update introduced by local-root symlink - Resolves: RHEL-92255 - Fix verification of unbound-control key files - Resolves: RHEL-65396 - Fix RebirthDay Attack (CVE-2025-5994) - Resolves: RHEL-104129 - Create root key if missing automatically (RHEL-127540) - Do not verify root.key in libs (RHEL-64339) - Add new root key 38696 (RHEL-77716) - Switch TLS configuration to follow TLS sockets by crypto-policy again (RHEL-147860) - Change the default of tls-use-system-policy-versions at build-time - Install correct trust anchor source in Image Mode (RHEL-127540) - Fix CVE-2026-33278 (RHEL-177822) Fix CVE-2026-42944 (RHEL-177936) Fix CVE-2026-42959 (RHEL-177797) - Fix CVE-2026-40622 (RHEL-184840) Fix CVE-2026-44390 (RHEL-186688) Fix CVE-2026-41292 (RHEL-187352) Fix CVE-2026-42534 (RHEL-187095) - Fix CVE-2026-55973 (RHEL-212809) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - update to Unicode 13 - https://www.unicode.org/versions/Unicode13.0.0/ - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebase to version 2.3.12 - Add unixODBC-c89.patch for GCC 14 compatibility - Update so-version-bump.patch for new version - Fix multilib_fix_c_header path to match actual header location - Resolves: RHEL-94798 - Fix imobiledevice support with new libplist, rebuild for soname bumps + upower-0.99.11-5 - Use upstreamed libplist patch - Add support for iPhone XS,XR - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild + upower-0.99.11-7 - Disable libimobiledevice integration on RHEL + upower-0.99.11-8 - Remove USB dependency - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.99.13 Resolves: #1994639 - Rebuild with updated test dependencies Related: #1994639 - Initial package (rhbz#1854898) - New upstream release enabling CPU/IO controllers for applications - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release fixing various issues - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release including cgroupify Resolves: #1931938 Resolves: #1931934 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - do not mention specific OS in description - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebase to 20200910 version (#1877974) - Fix some X11-related packaging bugs (#1918947) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Require mkfontscale and mkfontdir directly (#1937125) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - restore permissions of usbguard files Resolves: RHEL-126440 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - restore permissions of usbguard files Resolves: RHEL-126440 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - restore permissions of usbguard files Resolves: RHEL-126440 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - restore permissions of usbguard files Resolves: RHEL-126440 - Install usbguard-tmpfles.conf Resolves: RHEL-78188 - rebase to 1.1.4 - restore permissions of usbguard files Resolves: RHEL-126440 - restore permissions of usbguard files Resolves: RHEL-126440 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Avoid use-after-free in serialization Related: rhbz#1992873 - Rebase to latest upstream: 0.12.0 Related: rhbz#2020215 - Fix gating process Related: rhbz#2020215 - Fix unserialization (migration regression) Related: rhbz#2111368 - Rebase to latest upstream: 0.13.0 - Keeps usbredirserver binary (removed upstream) Related: rhbz#2135760 - Fixes 100% CPU usage when usbredirect used as TCP server Related: rhbz#2157520 - Fixes USB redirection of identical devices Resolves: rhbz#2157520 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Avoid use-after-free in serialization Related: rhbz#1992873 - Rebase to latest upstream: 0.12.0 Related: rhbz#2020215 - Fix gating process Related: rhbz#2020215 - Fix unserialization (migration regression) Related: rhbz#2111368 - Rebase to latest upstream: 0.13.0 - Keeps usbredirserver binary (removed upstream) Related: rhbz#2135760 - Fixes 100% CPU usage when usbredirect used as TCP server Related: rhbz#2157520 - Fixes USB redirection of identical devices Resolves: rhbz#2157520 - fix static analysis findings (RHEL-27043) - do not (double) free environ as glibc may want to do that (RHEL-76332) - do not crash when missing action argument (RHEL-90414) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - New upstream release. - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Specify all perl dependencies - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix build flags (#2044896) - Specify all perl dependencies - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix build flags (#2044896) - Specify all perl dependencies - Perl 5.32 rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild to pick up new build flags from redhat-rpm-config (#1984652) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - fix build flags (#2044896) - fix RHEL-16048 - uninitialized memory in SCM_CREDENTIALS in logger(1) - fix RHEL-21257 - logger sending process start time not current time with log messages - fix RHEL-16071 - issues in libblkid - fix RHEL-12783 - lscpu -e doesn't show the current real frequency value - fix RHEL-14612 - Userspace mount options are not preserved for NFS - lscpu: update tests, follow max freq for scaling (RHEL-12783) - lscpu: another tests update (RHEL-12783) - fix RHEL-34165 - lsipc: fix semaphore USED counter - fix RHEL-25265 - libblkid: Check offset in LUKS2 header - fix RHEL-25559 - more: fix poll() use - fix RHEL-25559 - more: make sure we have data on stderr - fix RHEL-56354 - lib/timeutils: parse_timestamp: fix second parsing - fix RHEL-56983 - sulogin: fix POSIX locale use - fix RHEL-113638 - lscpu: update ARM identifiers - fix RHEL-108386 - libblkid: (jmicron_raid) backport checksum verification - fix RHEL-123527 - mount: improve --all documentation - fix RHEL-123531 - libblkid: use snprintf() instead of sprintf() - fix RHEL-123536 - libfdisk: (dos) fix off-by-one in maximum last sector calculation - fix RHEL-133956 - login-utils: fix setpwnam() buffer use [CVE-2025-14104] - fix RHEL-132706 - use sysusers.d for uuidd - Update to version 22.13.1 Fixes CVE-2025-23083 CVE-2025-23085 CVE-2025-22150 Resolves: RHEL-76354 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-100426 - Update to 22.22.0 Resolves: RHEL-141879 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163369 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Remove obsolete lua pretransaction script from spec file Resolves: RHEL-81119 - Disable npm update notifications for users Resolves: RHEL-81079 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Update c-ares to newest version with fix for CVE-2025-31498 Resolves: RHEL-86587 - Patch fix for sqlite CVE-2025-31498 Resolves: RHEL-87320 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - Update to 22.15.0 - Drop upstream patches - Update to 22.16.0 Resolves: RHEL-92870 RHEL-89599 RHEL-92058 - Patch fix for CVE-2025-6965 Resolves: RHEL-103853 - Update to 22.19.0 Resolves: RHEL-111913 - Update to 22.22.0 Resolves: RHEL-118153 - Update to version 22.22.2 - introduced patch updating deps/nghttp2 to v 1.68.1 for CVE-2026-27135 - disabled failing tests in nghttp2 due to newer version - patch for npm/braces CVE-2026-25547 Resolves: RHEL-163370 Fixes: CVE-2026-1528 CVE-2026-2229 CVE-2026-1526 CVE-2026-1525 CVE-2026-27135 CVE-2026-27904 CVE-2026-26996 CVE-2026-25547 - Update to version 22.23.1 Resolves: RHEL-186622 RHEL-185998 RHEL-183669 Fixes: CVE-2026-12151 CVE-2026-48618 CVE-2026-48933 CVE-2026-48937 CVE-2026-48930 CVE-2026-48619 CVE-2026-48615 CVE-2026-48934 CVE-2026-48928 CVE-2026-48617 CVE-2026-48931 CVE-2026-48935 CVE-2026-42338 - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) by rebasing npm's bundled tar to 7.5.19 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-212550 RHEL-193849 RHEL-193891 RHEL-208680 - deps: update sqlite to 3.53.4 Fix: CVE-2026-11824, CVE-2026-11822 - deps: update npm/ip-address to 10.4.0 - deps: update npm/brace-expansion to 2.1.4 Fix: CVE-2026-69192 & CVE-2026-54272 CVE-2026-69152 Resolves: RHEL-223914 RHEL-223798 - Switch to compilation using gcc-toolset-12 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Remove sqlite extension test - Make nodejs-npm provide npm as well - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Rename nodejs-npm back to npm - Add patch to prevent fips usage segfault - Update to version 24.11.1 - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - Disable test-tls-session-cache.js as its not currently compatiable with RHEL environment - Update to version 24.13.0 - Update to version 24.14.1 - Update bundled nghttp2 to 1.68.1 - Update to version 24.18.0 - Fix CVE-2026-13149 (brace-expansion) in npm's bundled brace-expansion - Fix CVE-2026-59873, CVE-2026-59874 (node-tar) in npm's bundled tar - deps: update sqlite to 3.53.4 - Fix for CVE-2026-69192 & CVE-2026-54272 : ip-address - Update brace-expansion from 5.0.6 to 5.0.9 to address CVE-2026-13149 (memory exhaustion via deeply chained brace groups). as well as CVE-2026-14257 (fixed in 5.0.8). - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Valgrind 3.25.0 final - Valgrind 3.25.1 final - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Valgrind 3.25.0 final - Valgrind 3.25.1 final - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Valgrind 3.25.0 final - Valgrind 3.25.1 final - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Valgrind 3.25.0 final - Valgrind 3.25.1 final - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Add VALGRIND_3_24_BRANCH patches 0001-Prepare-NEWS-for-branch-3.24-fixes.patch 0002-vgdb.c-fork_and_exec_valgrind-Fix-off-by-one-error-w.patch 0003-vgdb.c-fork_and_exec_valgrind-Fix-another-off-by-one.patch 0004-regtest-add-a-fdleak-filter-for-write-on-write-on-li.patch 0005-Add-exp-and-supp-patterns-for-missing-main-frame-for.patch 0006-Add-additional-exp-ppc64le-files-to-EXTRA_DIST.patch 0007-Add-support-for-landlock_create_ruleset-444-landlock.patch 0008-helgrind-tests-tc17_sembar.c-Remove-bool-typedef.patch 0009-drd-tests-swapcontext.c-Rename-typedef-struct-thread.patch 0010-none-tests-bug234814.c-sa_handler-take-an-int-as-arg.patch 0011-Add-open_tree-move_mount-fsopen-fsconfig-fsmount-fsp.patch - Add more VALGRIND_3_24_BRANCH patches 0012-Recognize-new-DWARF5-DW_LANG-constants.patch 0013-Bug-498317-FdBadUse-is-not-a-valid-CoreError-type-in.patch 0014-linux-support-EVIOCGRAB-ioctl.patch - Split main valgrind package into several subpackages: - valgrind now contains just the core tools. - valgrind-scripts contains the post-processing scripts for callgrind, cachegrind, massif and dhat which depend on perl and python. - valgrind-gdb contains the debuginfo client/server and (v)gdb support. - valgrind-docs contains the man pages, html and pdf manual. - Adjust Requires/Recommends to subpackages can be installed independently. - valgrind-devel now Recommends, instead of Requires, valgrind. - valgrind-gdb Requires valgrind - valgrind-scripts Recommends valgrind-gdb - valgrind-gdb Recommends gdb - Valgrind 3.25.0 final - Valgrind 3.25.1 final - Add VALGRIND_3_25_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.25.x-fixes.patch - 0002-Bug-503241-s390x-Support-z17-changes-to-the-NNPA-ins.patch - Add ppc64-strcmp-ld.patch - Add 0003-Add-several-missing-syscall-hooks-to-ppc64-linux.patch - Valgrind 3.26.0 final - Remove all VALGRIND_3_25_BRANCH and proposed upstream patches - Refresh some-stack-protector and some-Wl-z-now patches. - Add vgstack to valgrind-gdb. - Update License to GPL-3.0-or-later - Add VALGRIND_3_26_BRANCH patches - 0001-Prepare-NEWS-for-branch-3.26-fixes.patch - 0002-Bug-511972-valgrind-3.26.0-tests-fail-to-build-on-up.patch - 0003-readlink-proc-self-exe-overwrites-buffer-beyond-its-.patch - 0004-Linux-DRD-suppression-add-an-entry-for-__is_decorate.patch - 0005-Linux-Helgrind-add-a-suppression-for-_dl_allocate_tl.patch - 0006-Disable-linux-madvise-MADV_GUARD_INSTALL.patch - 0007-Bug-514613-Unclosed-leak_summary-still_reachable-tag.patch - 0008-Bug-514206-Assertion-sr_isError-sr-failed-mmap-fd-po.patch - Add 0001-Refix-still_reachable-xml-closing-tag-and-add-testca.patch - Bump release for June 2024 mass rebuild - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.0.2 Resolves: RHEL-73273 - rebase to 8.0.3 - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - fix ImageMode: add tmpfiles.d entries for directories below /var - fix ImageMode: ensure ownership of /etc/valkey - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.0.2 Resolves: RHEL-73273 - rebase to 8.0.3 - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - fix ImageMode: add tmpfiles.d entries for directories below /var - fix ImageMode: ensure ownership of /etc/valkey - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Bump release for June 2024 mass rebuild - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.0.2 Resolves: RHEL-73273 - rebase to 8.0.3 - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - fix ImageMode: add tmpfiles.d entries for directories below /var - fix ImageMode: ensure ownership of /etc/valkey - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - rebase to 7.2.6 - merge limit.conf in main service files - drop /etc/sysconfig/valkey - rename compat package - fix working dir - partially enable upstream test suite - Bump release for October 2024 mass rebuild: Resolves: RHEL-64018 - rebase to 8.0.2 Resolves: RHEL-73273 - rebase to 8.0.3 - rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023 - fix ImageMode: add tmpfiles.d entries for directories below /var - fix ImageMode: ensure ownership of /etc/valkey - rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819 - Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733 - Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631 - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) - Resolves: RHEL-89702 - varnish: request smuggling attacks (CVE-2025-47905) - Resolves: RHEL-121819 - Image mode: fix creation of /var files - Resolves: RHEL-30337 - varnish: HTTP/2 Broken Window Attack may result in denial of service (CVE-2024-30156) - Resolves: RHEL-89702 - varnish: request smuggling attacks (CVE-2025-47905) - Resolves: RHEL-121819 - Image mode: fix creation of /var files - Rebuilt for varnish-6.4.0 - Switched upstream to Nils Goroll's fork which is the defacto current upstream - Synced description to reality - This is a snapshot build that needs autotools for building - Rebuilt for varnish-6.5.0 - Rebuilt for varnish-6.5.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - New upstream release - Switched back to original varnish github upstream, as it has catched up - Includes fix for CVE-2021-28543, VSV00006, bz#1939669 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Resolves: #1986346 - Rebase varnish-modules to the latest release - Rebuild for varnish 6.5.2 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Resolves: #1995450 - rebuild - Resolves: #2056622 - rebase varnish-modules to 18.0 - new version 18.0 - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() and sug_filltree() - RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() and sug_filltree() - RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - CVE-2026-41411 vim: Command injection via backticks in tag files - RHEL-178243 CVE-2026-46483 vim: command injection in tar plugin - RHEL-185874 CVE-2026-47167 vim: Code Injection in cucumber filetype plugin - RHEL-186646 CVE-2026-52858 vim: possible code execution with python3complete - RHEL-186659 CVE-2026-47162 vim: code injection via NetrwBookHistSave() - RHEL-194062 CVE-2026-55693 vim: out-of-bounds write in tree_count_words() and sug_filltree() - RHEL-191367 CVE-2026-57455 vim: Out-of-bounds write with soundfold() - RHEL-192113 CVE-2026-57456 vim: possible code execution with python complete via crafted docstrings - RHEL-203985 CVE-2026-59858 vim: arbitrary Ex command execution in C omni-completion - RHEL-201197 CVE-2026-59856 vim: potential command execution in PHP omni-completion - RHEL-40602 CVE-2021-3903 vim: heap-based buffer overflow vulnerability - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-2159 vim: Heap Use After Free in function ins_compl_get_exp in vim/vim - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - RHEL-112005 CVE-2025-53905 vim: Vim path traversial - RHEL-112009 CVE-2025-53906 vim: Vim path traversal - RHEL-143726 sudo not able to spawn "vi" command when NOEXEC is used to prevent escaping to shell - RHEL-147941 CVE-2026-25749 vim: Heap Overflow in Vim - RHEL-155438 CVE-2026-28417 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin - RHEL-155423 CVE-2026-28421 vim: Vim: Denial of service and information disclosure via crafted swap file - RHEL-159630 CVE-2026-33412 vim: Vim: Arbitrary code execution via command injection in glob() function - remove -O0 from flags - Related: RHEL-159630 rebuild to build with exception target - Resolves: RHEL-164966 vim: arbitrary command execution via modeline sandbox bypass - RHEL-170136 CVE-2026-35177 vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass - CVE-2026-41411 vim: Command injection via backticks in tag files - Rebased to virt-manager-5.0.0 (RHEL-34607) - The rebase also fixes the following bugs: RHEL-7124, RHEL-741, RHEL-10468, RHEL-17436, RHEL-1126 RHEL-62959, RHEL-65264 - Rebased to virt-manager-5.1.0 (RHEL-119340) - The rebase also fixes the following bugs: RHEL-105819 - Rebased to virt-manager-5.0.0 (RHEL-34607) - The rebase also fixes the following bugs: RHEL-7124, RHEL-741, RHEL-10468, RHEL-17436, RHEL-1126 RHEL-62959, RHEL-65264 - Rebased to virt-manager-5.1.0 (RHEL-119340) - The rebase also fixes the following bugs: RHEL-105819 - Rebased to virt-manager-5.0.0 (RHEL-34607) - The rebase also fixes the following bugs: RHEL-7124, RHEL-741, RHEL-10468, RHEL-17436, RHEL-1126 RHEL-62959, RHEL-65264 - Rebased to virt-manager-5.1.0 (RHEL-119340) - The rebase also fixes the following bugs: RHEL-105819 - Bring qemu-kvm to AlmaLinux 9 ppc64le - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 9.0 release - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 10.0 release - Resolves: rhbz#1949526 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Show OS-ID when running 'remote-viewer -V' Resolves: rhbz#1953282 - Clear auth entry fields Resolves: rhbz#1953933 - Rebase to 11.0 release - Add missing dep on libvirt-client for bash completion - Resolves: rhbz#2028604, rhbz#2000528 - Rebase to guestfs-tools 1.51.6 - Implement --key all:... resolves: RHEL-19030 - Fix crash because of off-by-one error resolves: RHEL-19062 - Fix virt-customize --chown invalid format resolves: RHEL-21899 - Add support for nbd+unix:// URIs resolves: RHEL-33956 - customize: Implement --inject-blnsvr operation resolves: RHEL-36634 - Reboot Windows between each firstboot script to improve reliability resolves: RHEL-55759 - Rebase to guestfs-tools 1.52.2 resolves: RHEL-56811 - Replace Jansson with json-c resolves: RHEL-65294 - Fix virt-drivers fails on opensuse guest if kernel-source is installed resolves: RHEL-80214 - mlcustomize: Remove dnf --verbose option resolves: RHEL-83200 - builder: Update link to templates to use https resolves: RHEL-94874 - Update guestfs-tools firstboot.bat to match virt-v2v resolves: RHEL-109521 - Enable building for ppc64le - Update to upstream version 1.11.1 [RHEL-47989] - Resolves: RHEL-47989 (Rebase virtiofsd to latest version for RHEL 9.5) - Update to upstream version 1.13.0 [RHEL-69134] - Resolves: RHEL-69134 (Rebase virtiofsd to latest version for RHEL 9.6) - Rebase to 1.13.2 [RHEL-96976] - Resolves: RHEL-96976 (Rebase virtiofsd to latest version for RHEL 9.6.z) - Rebase to 1.13.3 [RHEL-133032] - Resolves: RHEL-133032 (Rebase virtiofsd to latest version for RHEL 9.8) - Enable build on ppc64le - Initial package - Review fixes: - Fix Obsoletes - Use the prefix macro in the dictionary path - Use the license macro - Do not own the whole data directory, just the version 5 subdirectory - More review fixes: - BuildRequire python3-devel - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - make volume_key FIPS compliant (RHEL-78044) - ake getting password from backed up secret FIPS compatible (RHEL-113757) - make volume_key FIPS compliant (RHEL-78044) - ake getting password from backed up secret FIPS compatible (RHEL-113757) - Fix FEAT command to list AUTH TLS when TLSv1.3 is enabled - Resolves: RHEL-45022 - Add a tmpfiles.d config. - Resolves: RHEL-133075 - Fix CVE-2025-14242 - Resolves: RHEL-134170 - Fix bogus volatile caught by gcc-11 - Accommodate 'sudo toolbox' when tracking the active container - Update to 0.62.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.62.3 - Use https URLs for upstream - Revert a change that limited select all, as decided by Workstation WG - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.64.1 Resolves: #1957970 - Update to 0.64.2 - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174) - Fix the License fields and ship the correct license texts (#1973299) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix bogus volatile caught by gcc-11 - Accommodate 'sudo toolbox' when tracking the active container - Update to 0.62.2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.62.3 - Use https URLs for upstream - Revert a change that limited select all, as decided by Workstation WG - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 0.64.1 Resolves: #1957970 - Update to 0.64.2 - Add missing _VTE_CXX_NOEXCEPT to downstream patches (#1973174) - Fix the License fields and ship the correct license texts (#1973299) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 1.3.268.0 SDK - Update to 1.3.283.0 SDK - Update to 1.4.304.0 SDK - Update to 1.4.328.1 SDK - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Clean up old SysV-init related files - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuild for import to RHEL9 (#1978263) - bump for gating.yaml file - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - New upstream release 5.16 - fix memory leak when verbose mode is on (#1997755) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update wavpack to 5.4.0 (#1915740) - Security fix for CVE-2020-35738 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - CVE-2021-44269 wavpack: heap Out-of-bounds Read - Resolves: CVE-2021-44269 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.19.0 - Switch to meson build system - Drop old provides - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914 - Update to 1.21.0 Resolves: rhbz#2063522 - Update to 1.37 Resolves: RHEL-129827 - Initial package - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Second attempt - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Disable LTO for now. - Re-enable LTO as upstream GCC target/96939 has been fixed - Update to version 0.7.0 - Update to 0.7.1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 0.8.0 - Provide a pre-built man page on RHEL to avoid pulling scdoc - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.8.2 (#2071907) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 2.48.0 - Update to 2.48.1 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.48.1 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.52.4 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.52.4 - Update to 2.52.5 - Update to 2.48.0 - Update to 2.48.1 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.48.1 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.52.4 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.52.4 - Update to 2.52.5 - Update to 2.48.0 - Update to 2.48.1 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.48.1 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.52.4 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.52.4 - Update to 2.52.5 - Update to 2.48.0 - Update to 2.48.1 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.48.1 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.52.4 - Update to 2.48.2 - Reenable JIT - Update to 2.48.3 - Update to 2.48.5 - Update to 2.50.0 - Update to 2.50.1 - Update to 2.50.3 - Update to 2.50.4 - Update to 2.52.3 - Update to 2.52.4 - Update to 2.52.5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Copy rhel-9.4.json test repository from osbuild-composer - New release: 35.12 (bcl) Resolves: RHEL-1035 - Add support for compose start warning messages (bcl) - Update documentation urls for new locations (bcl) - weldr: go fmt changes to a couple comments (bcl) - weldr: Update ostree test for parentid with no url (bcl) - Makefile: Turn off seccomp for build-in-podman (bcl) - composer-cli: Update doc links (simon.steinbeiss) - docs: fix typo/formatting in HACKING.md (idiez) - Add release creation documentation (bcl) - spec: Require createrepo_c for weldr-client-tests package (bcl) - spec: migrate the license field to SPDX (ondrej) - Go: Switch to go 1.19 (bcl) - CI: Update terraform hash (bcl) - Actions: add workflow for marking and closing stale issues and PRs (thozza) - workflows: Stop using golint (bcl) - workflows: Add Go 1.21 and 1.22 to test matrix (bcl) - workflows: Update to golangci-lint 1.56.2 (bcl) - workflow: Ignore govulncheck failures (bcl) - workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl) - build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot]) - build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot]) - build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot]) - build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot]) - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot]) - Add centos 9 repos for testing Related: RHEL-1035 - tests: OSTree does not support the qcow2 image type - Add test repositories for RHEL 9.6 and 9.7 - Rebuild for CVE-2025-22871 Resolves: RHEL-89344 - Bump release for y-stream AND z-stream building using centpkg build --rhel-target=zstream Related: RHEL-89344 - Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 5.5.7 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.5.8 bump - 5.5.9 bump - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable mkpasswd building (#2054043) - Remove changelog from mkpasswd, it has double size of actual tool - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - 5.5.7 bump - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - 5.5.8 bump - 5.5.9 bump - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable mkpasswd building (#2054043) - Remove changelog from mkpasswd, it has double size of actual tool - Enable gating test in tmt (RHEL-137806) Resolves: RHEL-137806 - Update to version 0.5.10 Resolves: DESKTOP-2313 - Update to version 0.5.12 Resolves: RHEL-123624 - Update to version 0.5.10 Resolves: DESKTOP-2313 - Update to version 0.5.12 Resolves: RHEL-123624 - Resolves: RHEL-14596 - Wireshark hangs if dumpcap returned unexpected messages in sync pipe. - Resolves: RHEL-55554 - NFS packets decrypted via TLS are displayed as RPC - Resolves: RHEL-130438 - Access of Uninitialized Pointer in Wireshark - Resolves: RHEL-14596 - Wireshark hangs if dumpcap returned unexpected messages in sync pipe. - Resolves: RHEL-55554 - NFS packets decrypted via TLS are displayed as RPC - Resolves: RHEL-130438 - Access of Uninitialized Pointer in Wireshark - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Get rid of all things RPATH - Add Coverity Scan fixes patch - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix 9.1.0 FTBFS - Update to 1.8.0 - Move libWPEBackend-fdo-1.0.so back to -devel package - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.9.1 - Update to 1.9.90 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Update to 1.9.91 - Resolves: #1947186 - Update to 1.9.92 - Add GPG verification of source tarball - Resolves: #1961049 - Update to 1.10.0 - Resolves: #1968640 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt to add -devel subpackage to CRB Resolves: #2059249 - Expand variations for default_name - Dynamically set DefaultName on package install - Make wsl-setup a script - Change /usr/lib/wsl-distribution.conf to a ghost file - oobe: exit early for cloud-init - oobe: message for enabled cloud-init - oobe: wait for cloud-init to finish - Add Requires for utilities used in the OOBE script - oobe: don't append the user section to /etc/wsl.conf - Fix script arguments section - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Improve handling of HTTP 401 Unauthorized Resolves: #2127416 - updated to 3.6ga12 (#1823121) - updated to 4.0ga9 (#1840492) - updated to 4.0ga10 (#1860639) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - updated to 4.0ga11 (#1869461) - updated to 4.0ga12 (#1882956) - updated to 4.0ga13 (#1911117) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - updated to 4.0ga14 (#1922848) - update BRs (#1933647) - Remove proprietary data from source RPM - Resolves: RHEL-40891 - Rebuild to regenerate auto-requires - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.4.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.4.17 - Fix missing #include for gcc-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.4.18 - Spec file cleanups - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump NVR for el8->el9 upgrade path - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Update to 1.4.14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.4.17 - Fix missing #include for gcc-11 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 1.4.18 - Spec file cleanups - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Bump NVR for el8->el9 upgrade path - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Update to 0.1.4. - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild - Update to 0.1.4. - Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Update to 0.1.3 Resolves: #2060089 - Rebase to 1.12.1 Resolves: #2051488 - Update to 1.12.2 - Explicit library Requires should be arch-specific Resolves: #2068448 - Update to 1.12.3 Resolves: #2068448, #2069328 - Update to 1.12.4 Resolves: #2068448, #2076812 - Update to 1.12.6 Resolves: RHEL-16451 - Initial version Resolves: #2051473 - Make the Supplements specific to Fedora to retain consistency with xdg-desktop-portal-gtk Resolves: #2051473 - Recommend this portal backend for all GNOME users Resolves: #2051473 - Update to 41.2 Resolves: #2083018 - Keep screen share window list up to date Resolves: #2148362 - Add screencast stream restoration support Resolves: RHEL-4526 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 1.8.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebase to 1.12.0 Resolves: #2051493 - Recommend this portal backend for all GTK3 and GTK4 users Resolves: #2078624 - Play well with the GNOME portals Resolves: #2051495 - Drop fuzzy translations patch, no longer necessary - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Use make macros - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2022-4055 (RHEL-87487) - Update documentation for CVE-2022-4055 (RHEL-87487) - Upstream version bump - Upstream version bump - Upstream version bump - Upstream version bump - Fix build with Clang 20 - Upstream version bump - Add annocheck exceptions for BPF objects (Felix) - Re-enable debug builds (Felix) - Add libcap-ng-devel to BuildDepends - Upstream version bump - Drop upstreamed patch - Upstream version bump - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Fix incorrect permissions of xerces-j2-samples.jar - Fix man page default for sparse mkfs option (#2216118) - Fix man page, mkfs.xfs(8): Update section on dax+reflink - compatibility (#2226900) - Rebase to upstream version 6.3.0 - - Following is a list of dropped backported patches which - are contained in the current rebase: - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0) - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0) - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0) - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0) - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0) - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0) - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0) - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0) - - Rename the remaining patches so the name contains upstream version in which - they are implemented, or "rhelonly". - - Drop Eric Sandeen's public key used to check tarball signature and replace it by - Carlos Maiolino's (current upstream xfsprogs maintainer). - - Following is a list of newly backported patches from versions released after 6.3 - which are fixing patches present in version 6.3: - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch - - Backport: - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch - to implement RHEL-RHEL-8284 - - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch - to implement RHEL-7900 - - Related: RHEL-15399 - Related: RHEL-8284 - Related: RHEL-7900 - Rebase to a more recent upstream release - Related: RHEL-28339 - Following is a list of dropped backported patches which - are contained in the current rebase: - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch - - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream - version it was merged in. - Fix various CVE issues. - Related: RHEL-32996 - Following is the patch list: - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch - Fix coverity issue - Related: RHEL-39449 - Following is the patch list: - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch - xfs_repair: allow symlinks with short remote targets - Related: RHEL-54306 and RHEL-53164 - Fix missing rpm db entry for: /usr/share/xfsprogs - Related: RHEL-39450 - xfs unrepairable filesystem if directory block not junked in phase 3 - Related: RHEL-54342 - xfs unrepairable filesystem if directory block not junked in phase 3 - more - fixes - Related: RHEL-54342 - Fix man page default for sparse mkfs option (#2216118) - Fix man page, mkfs.xfs(8): Update section on dax+reflink - compatibility (#2226900) - Rebase to upstream version 6.3.0 - - Following is a list of dropped backported patches which - are contained in the current rebase: - xfsprogs-5.19.0-xfs-hoist-refcount-record-merge-predicates.patch (v6.2.0) - xfsprogs-5.19.0-xfs_db-fix-dir3-block-magic-check.patch (v6.1.0) - xfsprogs-5.19.0-xfs-estimate-post-merge-refcounts-correctly.patch (v6.2.0) - xfsprogs-5.19.0-xfs-get-rid-of-assert-from-xfs_btree_islastblock.patch (v6.2.0) - xfsprogs-5.19.0-xfs-fix-off-by-one-error-in-xfs_btree_space_to_heigh.patch (v6.2.0) - xfsprogs-5.19.0-xfs-fix-sb-write-verify-for-lazysbcount.patch (v6.1.0) - xfsprogs-5.19.0-xfs-removed-useless-condition-in-function-xfs_attr_n.patch (v6.0.0) - xfsprogs-5.19.0-xfs_repair-retain-superblock-buffer-to-avoid-write-h.patch (v6.1.0) - - Rename the remaining patches so the name contains upstream version in which - they are implemented, or "rhelonly". - - Drop Eric Sandeen's public key used to check tarball signature and replace it by - Carlos Maiolino's (current upstream xfsprogs maintainer). - - Following is a list of newly backported patches from versions released after 6.3 - which are fixing patches present in version 6.3: - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch - - Backport: - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch - to implement RHEL-RHEL-8284 - - Backport xfsprogs-rhelonly-xfs_quota-fix-missing-mount-point-warning.patch - to implement RHEL-7900 - - Related: RHEL-15399 - Related: RHEL-8284 - Related: RHEL-7900 - Rebase to a more recent upstream release - Related: RHEL-28339 - Following is a list of dropped backported patches which - are contained in the current rebase: - xfsprogs-6.4.0-set-bnobt-cntbt-numrecs-correctly-when-formattin.patch - xfsprogs-6.4.0-mkfs-fix-man-s-default-value-for-sparse-option.patch - xfsprogs-6.4.0-xfs_repair-don-t-add-junked-entries-to-the-rebuilt-d.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-fixing-imap-due-to-spa.patch - xfsprogs-6.4.0-xfs_repair-don-t-spray-correcting-imap-all-by-itself.patch - xfsprogs-6.4.0-xfs_repair-fix-messaging-when-shortform_dir2_junk-is.patch - xfsprogs-6.4.0-xfs_db-move-obfuscate_name-assertion-to-callers.patch - xfsprogs-6.4.0-xfs_db-fix-metadump-name-obfuscation-for-ascii-ci-fi.patch - xfsprogs-6.4.0-xfs-stabilize-the-dirent-name-transformation-functio.patch - - Rename xfs_quota-fix-missing-mount-point-warning.patch to reflect upstream - version it was merged in. - Fix various CVE issues. - Related: RHEL-32996 - Following is the patch list: - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-fix-leak-in-flist_find_ftyp.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-make-duration-take-time_t.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_scrub-don-t-call-phase_end-if-phase_rusage-was-n.patch - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-convert-fsrallfs-to-use-time_t-instead-of-in.patch - xfsprogs-6.5.0-xfs_fsr.xfs.8-xfs_fsr-replace-atoi-with-strtol.patch - xfsprogs-6.5.0-xfs_db.xfs.8-xfs_db-add-helper-for-flist_find_type-for-clearer-fi.patch - xfsprogs-6.5.0-xfs_repair.xfs.8-xfs_repair-catch-strtol-errors.patch - xfsprogs-rhelonly-xfs_db-fix-unitialized-variable-in-check_parents-function.patch - Fix coverity issue - Related: RHEL-39449 - Following is the patch list: - xfsprogs-6.5.0-xfs.8-xfs-fix-bounds-check-in-xfs_defer_agfl_block.patch - xfs_repair: allow symlinks with short remote targets - Related: RHEL-54306 and RHEL-53164 - Fix missing rpm db entry for: /usr/share/xfsprogs - Related: RHEL-39450 - xfs unrepairable filesystem if directory block not junked in phase 3 - Related: RHEL-54342 - xfs unrepairable filesystem if directory block not junked in phase 3 - more - fixes - Related: RHEL-54342 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Add %baserelease to help future mass rebuilds - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Split xkbcomp out from xorg-x11-xkb-utils into its own package (#1895770) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - xkeyboard-config 2.31 - Fix BuildRequires for git, we only need git-core - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - xkeyboard-config 2.32 - build with meson now - drop the xorg ruleset, no longer in use. Everything is hardcoded to evdev these days. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Restore the xorg ruleset, console-setup and possibly others are still using those (#1951875) - Allow for a "custom" layout - Don't mark the DTD document as XML document (#1952283) - Remove a duplicate keyboard layout to prevent a crash in gnome-desktop's xkbinfo - xkeyboard-config 2.33 (#1972014) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - xkeyboard-config 2.31 - Fix BuildRequires for git, we only need git-core - Add make to BuildRequires - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - xkeyboard-config 2.32 - build with meson now - drop the xorg ruleset, no longer in use. Everything is hardcoded to evdev these days. - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Restore the xorg ruleset, console-setup and possibly others are still using those (#1951875) - Allow for a "custom" layout - Don't mark the DTD document as XML document (#1952283) - Remove a duplicate keyboard layout to prevent a crash in gnome-desktop's xkbinfo - xkeyboard-config 2.33 (#1972014) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuild with regenerated Requires on Java - Disable building on i686 - Add noarch to ExclusiveArch - Rebuild with regenerated Requires on Java - Rebuild with regenerated Requires on Java - Fix patch usage - Disable building on i686 - Add noarch to ExclusiveArch - Install license files in licensedir instead of docdir - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop bundled expat and build against libxml2 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25236 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for RHEL 9 BETA for openssl 3.0 Related: rhbz#1971065 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop bundled expat and build against libxml2 - Resolves: CVE-2022-25235 - Resolves: CVE-2022-25236 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Fix memory leaks found by SAST Resolves: RHEL-35381 - Add xmlsec1-gnutls dependency on xmlsec1-gcrypt Related: RHEL-35381 - Fix double free in xmlSecGCryptAsymKeyDataGenerate Related: RHEL-35381 - Fix adopt function the same way as in upstream Related: RHEL-35381 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild - Minor spec improvements - Rebuild Related: #2069689 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Drop geode, since F31+ no longer supports the associated CPU - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Don't Require wacom on s390x, that's just silly - Change package version to year + build - Exclude most drivers from RHEL - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Enable hardened build flags Resolves: rhbz#2044898 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Ship xorg-x11-drv-evdev-devel in CRB (#2050369) - Map some high keycodes into the FK20-FK23 range (RHEL-84833) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Fix axis inversion on the first relative dial (RHEL-106467) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Fix axis inversion on the first relative dial (RHEL-106467) - Emulate a zero axis events after REL_WHEEL (RHEL-153540) - Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Fix axis inversion on the first relative dial (RHEL-106467) - Add support for Wacom Intuos Pro 3rd Gen (RHEL-106467) - Map ABS_THROTTLE to ring2 on all dualring devices (RHEL-106467) - Fix axis inversion on the first relative dial (RHEL-106467) - Emulate a zero axis events after REL_WHEEL (RHEL-153540) - Fix ToolSerials assignment for serials greater than INT_MAX (RHEL-153532) - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Make scriptlets non-failable (#1926533) - BuildRequire mkfontscale now that it's separated out from xorg-x11-font-utils (#1938069) - Use the make_build rpm macro - Replace the external xorg-x11-fonts-update-dirs script with an rpm macro doing the same thing, removing our runtime reliance on xorg-x11-font-utils (#1938074) - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop the daewoo-misc fonts, they have no upstream license terms and may be proprietary (#1952727) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 xorgproto 2022.2 (#2179319) - xorgproto 2024.1 (RHEL-36584) - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - Fix for CVE-2024-9632 - (RHEL-61997) - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - Rebase to Xwayland 24.1.9 (RHEL-129828) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-170368 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163199 Resolves: https://redhat.atlassian.net/browse/RHEL-163295 Resolves: https://redhat.atlassian.net/browse/RHEL-163253 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182426 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184292 - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - Rebase to Xwayland 24.1.9 (RHEL-129828) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-170368 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163199 Resolves: https://redhat.atlassian.net/browse/RHEL-163295 Resolves: https://redhat.atlassian.net/browse/RHEL-163253 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263 Resolves: https://redhat.atlassian.net/browse/RHEL-182426 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184292 - CVE fix for: CVE-2026-55999, CVE-2026-56000 Resolves: https://redhat.atlassian.net/browse/RHEL-191530 Resolves: https://redhat.atlassian.net/browse/RHEL-191519 - xwayland 23.2.7 - (RHEL-29912) - Fix for CVE-2024-9632 - (RHEL-61997) - CVE fix for: CVE-2025-26594 (RHEL-80204), CVE-2025-26595 (RHEL-80187), CVE-2025-26596 (RHEL-80190), CVE-2025-26597 (RHEL-80193), CVE-2025-26598 (RHEL-80195), CVE-2025-26599 (RHEL-80202), CVE-2025-26600 (RHEL-80203), CVE-2025-26601 (RHEL-80207) - CVE fix for: CVE-2025-49175 (RHEL-97288), CVE-2025-49176 (RHEL-97334), CVE-2025-49177 (RHEL-97357), CVE-2025-49178 (RHEL-97393), CVE-2025-49179 (RHEL-97404), CVE-2025-49180 (RHEL-97244) - CVE fix for: CVE-2025-62229 (RHEL-119977), CVE-2025-62230 (RHEL-120023), CVE-2025-62231 (RHEL-125018) - Rebase to Xwayland 24.1.9 (RHEL-129828) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117510 - Fix a regression in Xwayland 24.1.9 with XTS test Xlib10 Resolves: https://redhat.atlassian.net/browse/RHEL-169765 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163200 Resolves: https://redhat.atlassian.net/browse/RHEL-163296 Resolves: https://redhat.atlassian.net/browse/RHEL-163254 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163226 Resolves: https://redhat.atlassian.net/browse/RHEL-163308 Resolves: https://redhat.atlassian.net/browse/RHEL-163239 - CVE fix for: CVE-2026-50256, CVE-2026-50257, CVE-2026-50258, CVE-2026-50259, CVE-2026-50260, CVE-2026-50261, CVE-2026-50262, CVE-2026-50263, CVE-2026-50264 Resolves: https://redhat.atlassian.net/browse/RHEL-182435 - Other security related fixes Resolves: https://redhat.atlassian.net/browse/RHEL-184288 - CVE fix for CVE-2026-55999 Resolves: https://redhat.atlassian.net/browse/RHEL-191493 - CVE fix for CVE-2024-9632 - Backport fix for invalid Unicode sequence - CVE fix for: CVE-2025-26594 (RHEL-80201), CVE-2025-26595 (RHEL-80186), CVE-2025-26596 (RHEL-80188), CVE-2025-26597 (RHEL-80191), CVE-2025-26598 (RHEL-80192), CVE-2025-26599 (RHEL-80199), CVE-2025-26600 (RHEL-80198), CVE-2025-26601 (RHEL-80200) - Fix LEDs state after suspend/resume Resolves: https://issues.redhat.com/browse/RHEL-82085 - xfree86: Fix potentially NULL reference to platform device's PCI device Resolves: https://issues.redhat.com/browse/RHEL-84253 - CVE fix for: CVE-2025-49175 (RHEL-97285), CVE-2025-49176 (RHEL-97308), CVE-2025-49178 (RHEL-97387), CVE-2025-49179 (RHEL-97409), CVE-2025-49180 (RHEL-97253) - CVE fix for: CVE-2025-62229 (RHEL-119963), CVE-2025-62230 (RHEL-120035), CVE-2025-62231 (RHEL-125003) - Rebuild against xorg-x11-xtrans-devel 1.4.0-9 Resolves: RHEL-117509 - CVE fix for: CVE-2026-33999, CVE-2026-34000, CVE-2026-34001 CVE-2026-34002, CVE-2026-34003 Resolves: https://redhat.atlassian.net/browse/RHEL-163227 Resolves: https://redhat.atlassian.net/browse/RHEL-163309 Resolves: https://redhat.atlassian.net/browse/RHEL-163240 - xisxwayland 1 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Provide xisxwayland like all other utilities - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop mcpp from xrdb (#1954350) - Prune obsolete/unused utilities (#1954355) - Clean up the .gitignore file - Recommends: cpp for xrdb (#1954350) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Drop edid-decode since upstream has moved away from X.org - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - xev 1.2.4 - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Drop Provides for edid-decode, was removed in 7.7-33 (#1954354) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Fix RHBZ #1870201 - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Add BuildRequires for make - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix upgrades from non-alternativized versions/packages - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - make is no longer in buildroot by default - remove gimp plugin for eln, put explicit requirement for GTK2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild - Use make macros - https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - make is no longer in buildroot by default - remove gimp plugin for eln, put explicit requirement for GTK2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2022-45063 - Resolves: RHEL-87485 - Fix CVE-2022-24130 - Resolves: RHEL-94699 - Resolves: RHEL-103430 - Rebuild because of build failure - Resolves: RHEL-94699 - Resolves: RHEL-103430 - Fix CVE-2022-45063 - Resolves: RHEL-87485 - Fix CVE-2022-24130 - Resolves: RHEL-94699 - Resolves: RHEL-103430 - Rebuild because of build failure - Resolves: RHEL-94699 - Resolves: RHEL-103430 - Packaging of xxhash v0.8.1 for CS and RHEL copied from Fedora 36 - Fix broken manpages (upstream commit 836f4e735cf3) - Add OSCI testing harness - Update to version 0.8.2 - Drop patch 1-fix-man-page-installation.patch - Use SPDX license identifiers - Packaging of xxhash v0.8.1 for CS and RHEL copied from Fedora 36 - Fix broken manpages (upstream commit 836f4e735cf3) - Add OSCI testing harness - Update to version 0.8.2 - Drop patch 1-fix-man-page-installation.patch - Use SPDX license identifiers - Fix location of German man pages (RHBZ#1844813). - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Enabled CET for i686 (#1910368) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271 - Rebuild with regenerated Requires on Java - Rebuild - Rebuild - Rebuild - Disable building on i686 - Add noarch to ExclusiveArch - Fix location of German man pages (RHBZ#1844813). - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Enabled CET for i686 (#1910368) - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix arbitrary file write vulnerability Resolves: CVE-2022-1271 - fix CVE-2023-33460 - Resolves: #2221253 - fix CVE-2022-24795 - Related: Jira:RHEL-2112 - spec file fixes - Related: RHEL-60277 - Add missing BuildRequires - Related: RHEL-60277 - bump to 4.5.2 - remove pcre build dependency - Fix CVE-2025-3155 (RHEL-85927) - Fix CVE-2025-3155 (RHEL-85927) - Fix CVE-2026-13601 (RHEL-190224) - Fix CVE-2025-3155 (RHEL-85927) - Fix CVE-2025-3155 (RHEL-85927) - Fix CVE-2026-13601 (RHEL-190224) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Update to 3.37.90 - Update to 3.38.0 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Update to 40.beta - Switch to meson build system - Add Requires on python3-lxml (#1932011) - Update to 40.rc - Update to 40.0 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix CVE-2025-3155 (RHEL-85926) - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937 - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix message dialog label layout (#2078712) - Rebuilt for IMA sigs, glibc 2.34, aarch64 flags Related: rhbz#1991688 - Fix for IBM compressBound() rhbz#2056899 - Fix CVE-2018-25032 Resolves: CVE-2018-25032 - Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c - Resolves: CVE-2022-37434 - Fix for IBM strm.adler rhbz#2134074 - Inflate small window optimization for IBM z15 rhbz#2154775 - Rebased Power 8 optimization patches - Fix for Unnecessary IFUNC resolver for crc32_z - Fix for python3.11 broken libxml2 and lxml on s390x - Resolve fuzzing issue for unknown memory access - Fix covscan issue CWE-681 - Fix the Crash in zlib deflateBound() function on s390x - Resolves: BZ#2193044 - Rebase to version 1.1.2 (RHEL-118397) - Fix CVE-2020-18770 Resolves: RHEL-14967 - Fix CVE-2020-18770 Previous patch was causing segfault Resolves: RHEL-14967 - Fix a directory traversal issue in unzip-mem Resolves: RHEL-6266 - Fix CVE-2020-18770 Resolves: RHEL-14967 - Fix CVE-2020-18770 Previous patch was causing segfault Resolves: RHEL-14967 - Fix a directory traversal issue in unzip-mem Resolves: RHEL-6266